Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
138s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20231023-en -
resource tags
arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system -
submitted
12/11/2023, 09:44
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
NEAS.6fee6de3825534c0c48148f9127457f0.exe
Resource
win7-20231023-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
NEAS.6fee6de3825534c0c48148f9127457f0.exe
Resource
win10v2004-20231023-en
1 signatures
150 seconds
General
-
Target
NEAS.6fee6de3825534c0c48148f9127457f0.exe
-
Size
496KB
-
MD5
6fee6de3825534c0c48148f9127457f0
-
SHA1
7f91d85839d000a68cb5f243e684a07f8b64c81d
-
SHA256
cee899b19c33f2e4a5baef7122e9ea93274d4e9113303b596bed5be5ecffa1f6
-
SHA512
f6e9d39541393b780f55f752bd06995bd089e74edfa5c1d3dc6d73cc7bfc920defe536bb4eb7e32835db38ba3a8b0896dcfd3a177d8f8d1134bf936d0201d9f1
-
SSDEEP
768:teyk2OoAFn4ejOvoAPfTlJjfx8W7Nl9/IkY/S2DQ:qo249vp3RJjGW7T9g5l0
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3780 2132 WerFault.exe 83
Processes
-
C:\Users\Admin\AppData\Local\Temp\NEAS.6fee6de3825534c0c48148f9127457f0.exe"C:\Users\Admin\AppData\Local\Temp\NEAS.6fee6de3825534c0c48148f9127457f0.exe"1⤵PID:2132
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2132 -s 2242⤵
- Program crash
PID:3780
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 2132 -ip 21321⤵PID:2284