Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
58s -
max time network
448s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
14/10/2023, 15:04
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.22e536dff907a12264381665cb6ae4d0_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.22e536dff907a12264381665cb6ae4d0_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.22e536dff907a12264381665cb6ae4d0_JC.exe
-
Size
14KB
-
MD5
22e536dff907a12264381665cb6ae4d0
-
SHA1
7ef34ea0564a349e8f26e271973244717f9232eb
-
SHA256
27157f20a4381d2389016242f592c3e448f1f86e78ac638e585b639ad6cb0f2c
-
SHA512
c8b5c5ed3b8182defbebb6309d536416830a7696c8879ecc46ac921f711a41da0359722f45e250a4badccb27cedab776a58efe0e12c6003844490b45aef1b800
-
SSDEEP
96:LneCqli+oWpQWUEapBbWpBqqGew8obG8zVOESlllllllllllllllzcjNLdsrw5hQ:LmiAmEIBsnoXOXcjkA+lInqDE045HQ
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 572 4564 WerFault.exe 28
Processes
-
C:\Users\Admin\AppData\Local\Temp\NEAS.22e536dff907a12264381665cb6ae4d0_JC.exe"C:\Users\Admin\AppData\Local\Temp\NEAS.22e536dff907a12264381665cb6ae4d0_JC.exe"1⤵PID:4564
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4564 -s 2242⤵
- Program crash
PID:572
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 4564 -ip 45641⤵PID:1608