Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
150s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system -
submitted
03/06/2024, 09:41
Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Trojan.Packed.19696.8410.5962.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Trojan.Packed.19696.8410.5962.exe
Resource
win10v2004-20240426-en
General
-
Target
SecuriteInfo.com.Trojan.Packed.19696.8410.5962.exe
-
Size
244KB
-
MD5
82d81ff08fb6997c31c4c26a080f19ec
-
SHA1
a73d9ceb14573cda238a05ee8f3688bbbc9d753c
-
SHA256
895f3caac155d3075ce4097c4a82e912fea47e25d0bd4799129ebd82dd0baa5a
-
SHA512
a886dd908ca65e89411933d91437f2a829d43471bba928dbbd90e14561a6c6b4a77116492de713307bac067c24aa5482d87f6ced1cb96b4e8ca290e2143c31b6
-
SSDEEP
3072:s7E7wyvbSMO+OWn8esK6ZfQw8DqRpmIV7HA8mDiqplBYwf5XTg9Q/EvallH/eLJt:sANvbSYOrLoqRoqEtlqfY0t/U
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2500 3804 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Trojan.Packed.19696.8410.5962.exe"C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Trojan.Packed.19696.8410.5962.exe"1⤵PID:3804
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3804 -s 2202⤵
- Program crash
PID:2500
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 3804 -ip 38041⤵PID:3512