Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
33s -
max time network
42s -
platform
windows10-2004_x64 -
resource
win10v2004-20240704-en -
resource tags
arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system -
submitted
07/07/2024, 00:54
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
InfinityUI.exe
Resource
win10v2004-20240704-en
1 signatures
1800 seconds
General
-
Target
InfinityUI.exe
-
Size
107KB
-
MD5
bb315ba73714631fde1375c536c0a2a5
-
SHA1
266faef914679d1cc0bb3ffdb3645f7be9d5ddef
-
SHA256
8435bfb28ad4676dd8febe45ea5ddad5f9d48c546bd828a607045a1130f88e68
-
SHA512
5f391912903dfcae0c35c4873aff5179b5955d5d994acf6f5f88f6d98f65b3d2a72886fde0e72ed61f02619190d5980a01097e11020ccfc82871581d54c7829b
-
SSDEEP
3072:s3DnAKoMVWHmq3hV2Be3Pemye3Pemfe3PempfEPOgKHVj3ZymOBamuzcQWRrRdpS:snuefrHVEmOMms+tdp
Score
3/10
Malware Config
Signatures
-
Program crash 6 IoCs
pid pid_target Process procid_target 1772 3428 WerFault.exe 82 2948 4364 WerFault.exe 95 4436 1940 WerFault.exe 99 3876 3084 WerFault.exe 104 868 4536 WerFault.exe 107 4452 3640 WerFault.exe 108
Processes
-
C:\Users\Admin\AppData\Local\Temp\InfinityUI.exe"C:\Users\Admin\AppData\Local\Temp\InfinityUI.exe"1⤵PID:3428
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3428 -s 10522⤵
- Program crash
PID:1772
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 3428 -ip 34281⤵PID:2260
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:3536
-
C:\Users\Admin\AppData\Local\Temp\InfinityUI.exe"C:\Users\Admin\AppData\Local\Temp\InfinityUI.exe"1⤵PID:4364
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4364 -s 10482⤵
- Program crash
PID:2948
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 460 -p 4364 -ip 43641⤵PID:4980
-
C:\Users\Admin\AppData\Local\Temp\InfinityUI.exe"C:\Users\Admin\AppData\Local\Temp\InfinityUI.exe"1⤵PID:1940
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1940 -s 10162⤵
- Program crash
PID:4436
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 536 -p 1940 -ip 19401⤵PID:2404
-
C:\Users\Admin\AppData\Local\Temp\InfinityUI.exe"C:\Users\Admin\AppData\Local\Temp\InfinityUI.exe"1⤵PID:3084
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3084 -s 10162⤵
- Program crash
PID:3876
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 3084 -ip 30841⤵PID:3676
-
C:\Users\Admin\AppData\Local\Temp\InfinityUI.exe"C:\Users\Admin\AppData\Local\Temp\InfinityUI.exe"1⤵PID:4536
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4536 -s 10042⤵
- Program crash
PID:868
-
-
C:\Users\Admin\AppData\Local\Temp\InfinityUI.exe"C:\Users\Admin\AppData\Local\Temp\InfinityUI.exe"1⤵PID:3640
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3640 -s 10042⤵
- Program crash
PID:4452
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 556 -p 4536 -ip 45361⤵PID:1084
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 3640 -ip 36401⤵PID:4852