Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
142s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20231020-en -
resource tags
arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system -
submitted
21/10/2023, 21:14
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.1a316b2ea82d81bf8fd1d9e3d1e81410.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.1a316b2ea82d81bf8fd1d9e3d1e81410.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.1a316b2ea82d81bf8fd1d9e3d1e81410.exe
-
Size
14KB
-
MD5
1a316b2ea82d81bf8fd1d9e3d1e81410
-
SHA1
85e326e8f7f10a8252d4bb2b702cd3ecd6186c70
-
SHA256
9fec28f87db91c6d38c75a8dbd338f0e2c57a9604def8ed0ecdb8b08ada0c951
-
SHA512
d70845b79cbffefc44da3f852374ce2dd956c014a2f91666c958658e25e05eca91d4b21f371027c478610744670f0d99c84e0ff1396dba8cf9b3345d586f6bde
-
SSDEEP
192:B7x+SPiVVeKEep4xLzmYTZ0/p5Ib5Ib5Ib5Ib5Ib5Ib5Ib5Ib5Ib5Ib5Ib5Ib5Ia:BY6KEep4xZJOls+rDE045HW111
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3516 1424 WerFault.exe 40
Processes
-
C:\Users\Admin\AppData\Local\Temp\NEAS.1a316b2ea82d81bf8fd1d9e3d1e81410.exe"C:\Users\Admin\AppData\Local\Temp\NEAS.1a316b2ea82d81bf8fd1d9e3d1e81410.exe"1⤵PID:1424
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1424 -s 2362⤵
- Program crash
PID:3516
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 368 -p 1424 -ip 14241⤵PID:3144