Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
124s -
max time network
139s -
platform
windows10-2004_x64 -
resource
win10v2004-20231023-en -
resource tags
arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system -
submitted
16/11/2023, 09:30
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
NEAS.b83d36b41320c2960b4516942a332d20.exe
Resource
win7-20231020-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
NEAS.b83d36b41320c2960b4516942a332d20.exe
Resource
win10v2004-20231023-en
1 signatures
150 seconds
General
-
Target
NEAS.b83d36b41320c2960b4516942a332d20.exe
-
Size
188KB
-
MD5
b83d36b41320c2960b4516942a332d20
-
SHA1
1d7c0ef97b79aa5d98256ed0c4ac8901ef7a447c
-
SHA256
250cf3294acf8e978da142f4d81de38eba03735e82041124e8871157fbc69a23
-
SHA512
2fab99a74d4523f2189822b17d8668edbdc15637b9b7824a7b1e5d4fe5a8397713f21d8ff623d67b3fb8c3984341c446172403ed3be9e3238e4358687360b242
-
SSDEEP
768:aEA+elap4nNM8+R6N5HzHa86fsWC/QVrMg18L/1H5k:a7+eltm8Y6jHO86s/QVje9O
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1200 1084 WerFault.exe 84
Processes
-
C:\Users\Admin\AppData\Local\Temp\NEAS.b83d36b41320c2960b4516942a332d20.exe"C:\Users\Admin\AppData\Local\Temp\NEAS.b83d36b41320c2960b4516942a332d20.exe"1⤵PID:1084
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1084 -s 2282⤵
- Program crash
PID:1200
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 1084 -ip 10841⤵PID:2696