Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
139s -
max time network
160s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
12/10/2023, 22:20
Behavioral task
behavioral1
Sample
2788920x00000000004000000x000000000055E000memorydmp_JC.exe
Resource
win7-20230831-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2788920x00000000004000000x000000000055E000memorydmp_JC.exe
Resource
win10v2004-20230915-en
1 signatures
150 seconds
General
-
Target
2788920x00000000004000000x000000000055E000memorydmp_JC.exe
-
Size
1.4MB
-
MD5
90573f2ad99c8c9345149746db500a24
-
SHA1
754ff20c262c57d89de31b9e4f7734dc67a822d2
-
SHA256
07db8e356db7ba1d84a8350f541f8e286b3a48b0d527317da6dbd20a415f3702
-
SHA512
eba5ff62d62cde4a38d21eb7a3aa3f79b98ae30ede3add0f93b77c751eef0b56174434a3e55b6440fe8475371d2a6cde555cefeeba886fc252cc4f9e8ffda1b8
-
SSDEEP
3072:4NLOpnhTdOw9YAJOzIY9gVl01T2ENipdDg0z5:4NLYdT97JSIFl0QENqF
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3536 4232 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\2788920x00000000004000000x000000000055E000memorydmp_JC.exe"C:\Users\Admin\AppData\Local\Temp\2788920x00000000004000000x000000000055E000memorydmp_JC.exe"1⤵PID:4232
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4232 -s 2162⤵
- Program crash
PID:3536
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 4232 -ip 42321⤵PID:4256