Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
106s -
max time network
127s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
18/05/2023, 04:07
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20230220-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20230220-en
1 signatures
150 seconds
General
-
Target
file.exe
-
Size
336KB
-
MD5
4b7666e1b42e9e474795036a20d2beda
-
SHA1
45beb04280b6d9000c7a405dc3cc0b8e51e01fe5
-
SHA256
0b031cc034caaa64b1c04af46f75ad0ef11927faebc4885f5f9b6712653d1232
-
SHA512
8003f59445c65375e3c40d64b990e57d41cec3f4758a759c8f311be98300e7530003f213ca52c3b049c1b5b017f8b0d5f54d5d10365603c546df364213df2c68
-
SSDEEP
6144:onduqGLv3mBX159q1bAQdMkq2wjcLKhOcydQMpUtQgmdU378:oduqGLuBF59UO9EcbMqtQgmGY
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2236 4556 WerFault.exe 84
Processes
-
C:\Users\Admin\AppData\Local\Temp\file.exe"C:\Users\Admin\AppData\Local\Temp\file.exe"1⤵PID:4556
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4556 -s 11322⤵
- Program crash
PID:2236
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 4556 -ip 45561⤵PID:636