Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
155s -
max time network
168s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
14/10/2023, 18:05
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.92137393d05555d6f40f95266b926360.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.92137393d05555d6f40f95266b926360.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.92137393d05555d6f40f95266b926360.exe
-
Size
248KB
-
MD5
92137393d05555d6f40f95266b926360
-
SHA1
f453066ca414444d07bfa8aeac936717fcd4d0b3
-
SHA256
fb0da2d667fa2dad4436ef75f6eccc202e1b096ed2330dd17e397759550d8acb
-
SHA512
b685eb94461fcbe79e12d252202be86c026ff0010ded71f8bdb115311cb6fb567e823cb5f49742f8e02851c0311758ef6372c9959d55ca7e84316653c042eac2
-
SSDEEP
768:VkL7pwhEeHgFWYlZJ1KHJeCfI/Hv9nYPG3FMS//1H5gB8W44jzo1MkEJuUQW+21e:Y7pNeATl70HJeVYPG1RFy5YMkhohe
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4260 3724 WerFault.exe 85
Processes
-
C:\Users\Admin\AppData\Local\Temp\NEAS.92137393d05555d6f40f95266b926360.exe"C:\Users\Admin\AppData\Local\Temp\NEAS.92137393d05555d6f40f95266b926360.exe"1⤵PID:3724
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3724 -s 2242⤵
- Program crash
PID:4260
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 3724 -ip 37241⤵PID:2308