Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

WagasServiceold.exe

windows7-x64

3

WagasServiceold.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    142s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230220-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
  • submitted
    13/06/2023, 16:38

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    WagasServiceold.exe

  • Size

    182KB

  • MD5

    92b72c4c8897603b19d9041e833da474

  • SHA1

    57e74d2030cddf2dae9b322ce46179815ebb52e4

  • SHA256

    1d6cfb4a7ff760be78907bfed0b1604da3b0f8e4bac0c9205706beac7e60c6ac

  • SHA512

    350d813767d024de6f2903cac3fc6365c5298616cdb599d4463f2995fc5af2f1a1512a8a397ba82cd078f5845cb34e46ea3a9b35b4a95d3a6e90b580f76b0beb

  • SSDEEP

    1536:GKzLiiE72JJZnErNd+4+HLPX+dwukzoUxC/LBpXdtMr7LvaZXfbddoNmFWlz/IS6:92QniWRLOmdzjIXNtUUXfbddoNmFjb

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\WagasServiceold.exe
    "C:\Users\Admin\AppData\Local\Temp\WagasServiceold.exe"
    1⤵
      PID:4380
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4380 -s 804
        2⤵
        • Program crash
        PID:4172
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 460 -p 4380 -ip 4380
      1⤵
        PID:4252

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/4380-133-0x00000000005E0000-0x0000000000614000-memory.dmp

        Filesize

        208KB

        Download