Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
138s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
14/10/2023, 17:58
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
NEAS.6f74d9ccc67f00efcbe5679ebc7afdb0.exe
Resource
win7-20230831-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
NEAS.6f74d9ccc67f00efcbe5679ebc7afdb0.exe
Resource
win10v2004-20230915-en
1 signatures
150 seconds
General
-
Target
NEAS.6f74d9ccc67f00efcbe5679ebc7afdb0.exe
-
Size
14KB
-
MD5
6f74d9ccc67f00efcbe5679ebc7afdb0
-
SHA1
291d6586ff0987e15ea79619db7e55eacda65041
-
SHA256
afa91210afdd3731631602d2693cd6f1c1b49b8ff35fdce8c983fb1ed0088899
-
SHA512
d0d6a9af68e44d6f5cc1b679d906a7106aa8ffdeae10663e5711f6f236b12c3f218f7cbe5cf95013643deac046d964e80a77a4c2e8e84f15819d340ec6f35de7
-
SSDEEP
384:dCUASN2gNe+++++++7pppppSJyHZbH/DE045Hc777:dz5N2gNe+++++++0JWpA
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 5008 3076 WerFault.exe 84
Processes
-
C:\Users\Admin\AppData\Local\Temp\NEAS.6f74d9ccc67f00efcbe5679ebc7afdb0.exe"C:\Users\Admin\AppData\Local\Temp\NEAS.6f74d9ccc67f00efcbe5679ebc7afdb0.exe"1⤵PID:3076
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3076 -s 2282⤵
- Program crash
PID:5008
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 3076 -ip 30761⤵PID:3148