Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
141s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20231020-en -
resource tags
arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system -
submitted
18/11/2023, 05:23
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
NEAS.0fcd785360517eca01ec7b1b5e83aea0.exe
Resource
win7-20231020-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
NEAS.0fcd785360517eca01ec7b1b5e83aea0.exe
Resource
win10v2004-20231020-en
1 signatures
150 seconds
General
-
Target
NEAS.0fcd785360517eca01ec7b1b5e83aea0.exe
-
Size
260KB
-
MD5
0fcd785360517eca01ec7b1b5e83aea0
-
SHA1
40b1f4f98db438a2be5e2d31cd5a17a858a4b5db
-
SHA256
dc7e3e35db22cd036343051aa87f4a5a24821b66d8406d11282001a894324ef1
-
SHA512
5dd08bf72bf1981bad525a64db67c61847ba7fe31063e8acb034fe9c1bbf67ef39cb8af47c966de989f772647bb5f1cefb31fe5e8bed345694d96e5ffc1fd431
-
SSDEEP
1536:2D2PEJZYss1/mVHNDeQWjxiMFOXiV4rN+zL20gJi1i:vPEJZJs1/+9eQuPFOXiVUgzL20WK
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1668 1048 WerFault.exe 28
Processes
-
C:\Users\Admin\AppData\Local\Temp\NEAS.0fcd785360517eca01ec7b1b5e83aea0.exe"C:\Users\Admin\AppData\Local\Temp\NEAS.0fcd785360517eca01ec7b1b5e83aea0.exe"1⤵PID:1048
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1048 -s 2242⤵
- Program crash
PID:1668
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1048 -ip 10481⤵PID:4828