Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
149s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
11/07/2024, 01:01
Static task
static1
Behavioral task
behavioral1
Sample
0479d70c31696169a09d37e34d511b587b1a678563867e41b4881325e9f96101.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
0479d70c31696169a09d37e34d511b587b1a678563867e41b4881325e9f96101.exe
Resource
win10v2004-20240709-en
General
-
Target
0479d70c31696169a09d37e34d511b587b1a678563867e41b4881325e9f96101.exe
-
Size
3.0MB
-
MD5
387539254d02064c55935e94f0f56649
-
SHA1
e9967d44ff8a1b1f5d01a133acee35b42f4f4051
-
SHA256
0479d70c31696169a09d37e34d511b587b1a678563867e41b4881325e9f96101
-
SHA512
7d2050968003e37f1549c966989b6656bf2cc580169d62d765200fe649c898c4b21d5b837dc79061350bb08bd6427551bdded7ff2a58f9f9f7783e4efc659b33
-
SSDEEP
49152:m0l/K0FDru/04QwSrjtujaLI7vrrgzS77VuaqqBO6Gjj7hVrETZmq+Orinkp+cIi:mmdFDrOSSaLIduDqMb3zCgq+O2ngIi
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 12928 5008 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\0479d70c31696169a09d37e34d511b587b1a678563867e41b4881325e9f96101.exe"C:\Users\Admin\AppData\Local\Temp\0479d70c31696169a09d37e34d511b587b1a678563867e41b4881325e9f96101.exe"1⤵PID:5008
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5008 -s 5402⤵
- Program crash
PID:12928
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 5008 -ip 50081⤵PID:12836