Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
91s -
max time network
145s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
29/12/2022, 19:06
Behavioral task
behavioral1
Sample
e30000.exe
Resource
win7-20221111-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
e30000.exe
Resource
win10v2004-20220901-en
1 signatures
150 seconds
General
-
Target
e30000.exe
-
Size
364KB
-
MD5
a25ec9f110118e2005efb708122a966e
-
SHA1
cf44fd846eb0507fed3cc52a9e778e9aa681b794
-
SHA256
27a37a8a1e96bf4cb100cb1c4af9115b6ce8dfac1abc85037f7e3ac32834ba26
-
SHA512
fc6e69c48517631baf72d22a64040273035998edb50e522e41afaad4c6967fcde9e1cf897643d38a516f1f84e7fc433a4792f3df991bb340b605cc8ef0b6ceec
-
SSDEEP
6144:FoJbCQpRFj/ThaVvBUT2FfIuZml7p0zeaUpT:FH0FU8wfIuZmlNEe
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2412 3488 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\e30000.exe"C:\Users\Admin\AppData\Local\Temp\e30000.exe"1⤵PID:3488
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3488 -s 3682⤵
- Program crash
PID:2412
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 3488 -ip 34881⤵PID:4760