Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
93s -
max time network
94s -
platform
windows10-2004_x64 -
resource
win10v2004-20240611-en -
resource tags
arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system -
submitted
14/06/2024, 23:08
Static task
static1
Behavioral task
behavioral1
Sample
7e203444a486bb431acaf6b1ba5b01004f9c39e327b163572440f4cc76ace598.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
7e203444a486bb431acaf6b1ba5b01004f9c39e327b163572440f4cc76ace598.exe
Resource
win10v2004-20240611-en
General
-
Target
7e203444a486bb431acaf6b1ba5b01004f9c39e327b163572440f4cc76ace598.exe
-
Size
184KB
-
MD5
38fc70b7faff486e11b2ee3a14f255b0
-
SHA1
ced8d43116f04645461321f4470e54d430900d46
-
SHA256
7e203444a486bb431acaf6b1ba5b01004f9c39e327b163572440f4cc76ace598
-
SHA512
7692c2749667590f7fd5cf25bd0f7e80aeec3c8fb84a426d7f46fe9c1fc2b048f3228393a6ec1836a406f8e4f464c7b38b218baa888bce4f28195dca28a1da2d
-
SSDEEP
3072:RC3t7ionuGOvtTWa6IK4RsH8wCvnGnxiuZ:RC0oeFTWgRS8wCPGnxiu
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 68 3760 WerFault.exe 80 -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3760 7e203444a486bb431acaf6b1ba5b01004f9c39e327b163572440f4cc76ace598.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\7e203444a486bb431acaf6b1ba5b01004f9c39e327b163572440f4cc76ace598.exe"C:\Users\Admin\AppData\Local\Temp\7e203444a486bb431acaf6b1ba5b01004f9c39e327b163572440f4cc76ace598.exe"1⤵
- Suspicious use of SetWindowsHookEx
PID:3760 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3760 -s 7202⤵
- Program crash
PID:68
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 360 -p 3760 -ip 37601⤵PID:4652