Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
133s -
max time network
108s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
01/06/2024, 02:30
Static task
static1
Behavioral task
behavioral1
Sample
553baf02077ac359b88e2f9efc19fad5836b2f831cf67450aac948d2fff96edf.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
553baf02077ac359b88e2f9efc19fad5836b2f831cf67450aac948d2fff96edf.exe
Resource
win10v2004-20240508-en
General
-
Target
553baf02077ac359b88e2f9efc19fad5836b2f831cf67450aac948d2fff96edf.exe
-
Size
1.5MB
-
MD5
0ff7a1e282ddbd3f4b737d487e98423f
-
SHA1
62725ef810879397e29275b2092985e7431dd1f6
-
SHA256
553baf02077ac359b88e2f9efc19fad5836b2f831cf67450aac948d2fff96edf
-
SHA512
7e44a47dbaf576828bb53c3d4590a2ef9da5a42e2f6457cd0a00bdfc0b6b0b29303af924215d06b58a69d8db58e254b7e2a787f067c6e9983d9c87a4af91bea2
-
SSDEEP
24576:jlKEsyh/RZI4ytmiYpGGZQZPcI0TDFY8JZC+051UK1UuwmC4SwJ9WCAi7WNg+AwY:jlKEDZI3+GNj0PC8J6QnmD3AXNgVwYie
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 1716 1868 WerFault.exe 82 3656 1868 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\553baf02077ac359b88e2f9efc19fad5836b2f831cf67450aac948d2fff96edf.exe"C:\Users\Admin\AppData\Local\Temp\553baf02077ac359b88e2f9efc19fad5836b2f831cf67450aac948d2fff96edf.exe"1⤵PID:1868
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1868 -s 5282⤵
- Program crash
PID:1716
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1868 -s 5522⤵
- Program crash
PID:3656
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 368 -p 1868 -ip 18681⤵PID:1612
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 472 -p 1868 -ip 18681⤵PID:4728