Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
133s -
max time network
138s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
17/08/2023, 13:05
Behavioral task
behavioral1
Sample
2468-140-0x0000000180000000-0x0000000180009000-memory.dll
Resource
win7-20230712-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2468-140-0x0000000180000000-0x0000000180009000-memory.dll
Resource
win10v2004-20230703-en
1 signatures
150 seconds
General
-
Target
2468-140-0x0000000180000000-0x0000000180009000-memory.dll
-
Size
36KB
-
MD5
41bf0651d00dde92aa78a1c50b5c5527
-
SHA1
f79635ddbaa1e0242f17c60578dca60d0eb40d3c
-
SHA256
56af847e5b4cf295e44d70b2acfa91c06710d97f7d9843c3b5ecd1aea99e26e5
-
SHA512
fdc009d3838736a58b3fb4b4a511672494f894f10170f3baedde1a02ba548e9cba385d9243877f1e3c2a157f0e5087127378b378b2e78fa6cf26c059fbadd08c
-
SSDEEP
384:s5Jxayczq7Yjt9lfle9s6PLfA6kYGi8N:s5DHYeIlfle9HDfGiy
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3476 2460 WerFault.exe 44
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2468-140-0x0000000180000000-0x0000000180009000-memory.dll,#11⤵PID:2460
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 2460 -s 2402⤵
- Program crash
PID:3476
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 428 -p 2460 -ip 24601⤵PID:404