Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
137s -
max time network
142s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
13/10/2023, 21:31
Behavioral task
behavioral1
Sample
1496-2-0x0000000000400000-0x0000000000711000-memory.exe
Resource
win7-20230831-en
3 signatures
150 seconds
General
-
Target
1496-2-0x0000000000400000-0x0000000000711000-memory.exe
-
Size
3.1MB
-
MD5
a00462805940f837a079344b7ad3d4ed
-
SHA1
6de86d4e2e6bc8c69e11f0998bf0a11f59acb8f3
-
SHA256
7a4962cd575d04f076ab9b881b4b6123d10353f5aa8146c8d4420ea4669c538c
-
SHA512
310ff187f15ff3fca0998371938699eb2f5a37e713c19a349f77cedd9ec2c3448ec1949a721ad9be50f92b7d3f2cfebf742b917860e30fbdca6b7b8edb6867a2
-
SSDEEP
3072:KwZx7tPwbpTK8Q5Uzf4JElJvIT46Ze7RqGNOf:bZ1xwbJKAzAElJA8xtMf
Malware Config
Signatures
Processes
-
C:\Users\Admin\AppData\Local\Temp\1496-2-0x0000000000400000-0x0000000000711000-memory.exe"C:\Users\Admin\AppData\Local\Temp\1496-2-0x0000000000400000-0x0000000000711000-memory.exe"1⤵PID:972
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 972 -s 1362⤵
- Program crash
PID:2132
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 972 -ip 9721⤵PID:2900