Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
91s -
max time network
116s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
25/05/2023, 20:16
Behavioral task
behavioral1
Sample
1284-126-0x00000000000B0000-0x00000000000DA000-memory.exe
Resource
win7-20230220-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
1284-126-0x00000000000B0000-0x00000000000DA000-memory.exe
Resource
win10v2004-20230220-en
1 signatures
150 seconds
General
-
Target
1284-126-0x00000000000B0000-0x00000000000DA000-memory.exe
-
Size
168KB
-
MD5
098f46ab82e55a62c1df109dadea25ab
-
SHA1
4a59fcced2e76657bbb60f80060d7e6d96056cce
-
SHA256
9cc3e73c659128c5876a4cf77bdda088ac5cea17a88b574f55494e3bbbf1d034
-
SHA512
ca4465dd0b829a909b16b51e2667c70e1926942982f0e299d760ee54c54b8cf12452aa73397dcb585c5ffb70e1ad8263842d3cf5b16ae79c62d5732475e3abf9
-
SSDEEP
3072:kV+m5c/QmRSNp2Tm1bENx3Gh6Z08e8hU:kj2w+nGh6i
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4940 1568 WerFault.exe 78
Processes
-
C:\Users\Admin\AppData\Local\Temp\1284-126-0x00000000000B0000-0x00000000000DA000-memory.exe"C:\Users\Admin\AppData\Local\Temp\1284-126-0x00000000000B0000-0x00000000000DA000-memory.exe"1⤵PID:1568
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1568 -s 2242⤵
- Program crash
PID:4940
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 1568 -ip 15681⤵PID:1496