Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
40s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
16/10/2023, 18:30
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
NEAS.9c6cc343a741e703b2e5c38d5690fb60.exe
Resource
win7-20230831-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
NEAS.9c6cc343a741e703b2e5c38d5690fb60.exe
Resource
win10v2004-20230915-en
1 signatures
150 seconds
General
-
Target
NEAS.9c6cc343a741e703b2e5c38d5690fb60.exe
-
Size
980KB
-
MD5
9c6cc343a741e703b2e5c38d5690fb60
-
SHA1
e506a71992be4d7a9fe7001180b3e3873d021d4a
-
SHA256
38a4158757da3de05d8b43e6644a6a87ef3621a62c2030be45038dca50fe9401
-
SHA512
eedfbed8a9fbccb4ad33ced1caf0858cd744a064764bf83c7f0bfc4b136f1b1faafb19f2762ecdcd954cf28d6f3301538af4f6f437016fe9590f62bc9aa13e7a
-
SSDEEP
12288:iSzFGsfXKlrEGkdI4qZAuN/JIzI5nC/SMZoSqenFYl0FIAL:iaFGsfXKVEVdI4WNRICJMzFHL
Score
3/10
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 2208 2260 WerFault.exe 81 2204 2260 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\NEAS.9c6cc343a741e703b2e5c38d5690fb60.exe"C:\Users\Admin\AppData\Local\Temp\NEAS.9c6cc343a741e703b2e5c38d5690fb60.exe"1⤵PID:2260
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2260 -s 5562⤵
- Program crash
PID:2208
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2260 -s 5602⤵
- Program crash
PID:2204
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 2260 -ip 22601⤵PID:4104
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2260 -ip 22601⤵PID:4024