Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
150s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
15/10/2023, 19:39
Static task
static1
Behavioral task
behavioral1
Sample
79ec7a151046176ecb554777bbe76cc0_exe32.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
79ec7a151046176ecb554777bbe76cc0_exe32.exe
Resource
win10v2004-20230915-en
General
-
Target
79ec7a151046176ecb554777bbe76cc0_exe32.exe
-
Size
250KB
-
MD5
79ec7a151046176ecb554777bbe76cc0
-
SHA1
1027d77739e2714179251f12a3b250ebf31ef4ae
-
SHA256
aef5a25b96d35573aae67e560f9c151a55ad2486a6cb0a0ace00fa352ea88e98
-
SHA512
190d64bca1c84f49151569cd646b476cdcbeedfac06392865320b4ae375880113aab7580306b8194f54c352c01af3810822b10832b5b00894775335d2ca84856
-
SSDEEP
3072:ZMssQNxJUJTp2E+qvFuIoF1PYUGQQEKGLY+q+XrNJd2/GP+ohqUR5IrqmZxeB3d8:eQOpkpNJl5Rggtra4j6
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3812 636 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\79ec7a151046176ecb554777bbe76cc0_exe32.exe"C:\Users\Admin\AppData\Local\Temp\79ec7a151046176ecb554777bbe76cc0_exe32.exe"1⤵PID:636
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 636 -s 7202⤵
- Program crash
PID:3812
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 636 -ip 6361⤵PID:2012