Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
142s -
max time network
61s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
24/12/2023, 23:21
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
19155d199b2c65813d733bd4d4c32672.exe
Resource
win7-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
19155d199b2c65813d733bd4d4c32672.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
19155d199b2c65813d733bd4d4c32672.exe
-
Size
62KB
-
MD5
19155d199b2c65813d733bd4d4c32672
-
SHA1
5dbb80733fd9a3e3c7f57821a77acbed0c1838ea
-
SHA256
883d6b046f2c84c462bcc788377ae35caf4fcea58b512f2e3e552357c1be82a1
-
SHA512
ca0ad2a874ede1f54d58e75ba2f60d44a825320f5eff813b90618bad00eb1bf328ca6dcc62361d94377d305cd735017753a2cf24d5e0812b4a8cf4894e3fdae3
-
SSDEEP
768:DZNEVIDpRCBeOJvxgQq+4fJ24FYHAhVbqOJluGLP5R70CXcg4jnkCouFO5Jl:MID8LxgR+Q29HubbjrvJ4rroug5Jl
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3136 1840 WerFault.exe 14
Processes
-
C:\Users\Admin\AppData\Local\Temp\19155d199b2c65813d733bd4d4c32672.exe"C:\Users\Admin\AppData\Local\Temp\19155d199b2c65813d733bd4d4c32672.exe"1⤵PID:1840
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1840 -s 4682⤵
- Program crash
PID:3136
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1840 -ip 18401⤵PID:4696