Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
143s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
11/10/2023, 11:13
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
10aabe1c6225e6df33990b8f9e6e0820_JC.exe
Resource
win7-20230831-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
10aabe1c6225e6df33990b8f9e6e0820_JC.exe
Resource
win10v2004-20230915-en
1 signatures
150 seconds
General
-
Target
10aabe1c6225e6df33990b8f9e6e0820_JC.exe
-
Size
672KB
-
MD5
10aabe1c6225e6df33990b8f9e6e0820
-
SHA1
21bbb6e7fac0f86c1c0641bcbe85481530cd2478
-
SHA256
6c104addbf9a6a5f3921b02edadf5f48b0975a609dd5cf7d1010f4c29afb8186
-
SHA512
3c332e7539102cd7eaa4fcdd8f58b56132073c1443069a271e8fd86975a946baa85f2ca5a59c1eaf2fa698444b0904b8c298fcf79e405427451963b2bd2d1e4b
-
SSDEEP
12288:0ANAu3yx+XQsiE9SULxIe4Hnlq2PyHsvAYhWWHq7UB:0ANa+XQsiE5IlsHsvA/W
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1096 1520 WerFault.exe 84
Processes
-
C:\Users\Admin\AppData\Local\Temp\10aabe1c6225e6df33990b8f9e6e0820_JC.exe"C:\Users\Admin\AppData\Local\Temp\10aabe1c6225e6df33990b8f9e6e0820_JC.exe"1⤵PID:1520
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1520 -s 5042⤵
- Program crash
PID:1096
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1520 -ip 15201⤵PID:1476