Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
148s -
max time network
85s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
24/12/2023, 19:35
Static task
static1
Behavioral task
behavioral1
Sample
0de6949e7865554911352a030ace4601.exe
Resource
win7-20231215-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
0de6949e7865554911352a030ace4601.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
0de6949e7865554911352a030ace4601.exe
-
Size
34KB
-
MD5
0de6949e7865554911352a030ace4601
-
SHA1
76c7b6deba06a772c910f98f24cee4bbfff6c27f
-
SHA256
202a296544241008e42158e6dda88d78a3a3415dea953db0f5a9a2c96db3b22c
-
SHA512
0e476db51042d4050cf83b18f6137e4c6954ae33d6f82748ebbc1350004a3769ec55495287f02f0ee03a5ea6e7c48b9c850c1994b27c45f8d3ed77438f71a260
-
SSDEEP
384:t9oSRj7jPse5cH1Q1gbJGXoUTnYPLLios/uMeMg:t9swsqgtnYju3
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3108 4780 WerFault.exe 27
Processes
-
C:\Users\Admin\AppData\Local\Temp\0de6949e7865554911352a030ace4601.exe"C:\Users\Admin\AppData\Local\Temp\0de6949e7865554911352a030ace4601.exe"1⤵PID:4780
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4780 -s 5882⤵
- Program crash
PID:3108
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 4780 -ip 47801⤵PID:4932