Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
143s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
24/12/2023, 19:57
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
0f3cef0bab085e427561b34ecb7335dd.exe
Resource
win7-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
0f3cef0bab085e427561b34ecb7335dd.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
0f3cef0bab085e427561b34ecb7335dd.exe
-
Size
129KB
-
MD5
0f3cef0bab085e427561b34ecb7335dd
-
SHA1
3f79894b85fbf7b955413f7d0e867302a1fa2a0d
-
SHA256
48a87a69a8fb80bf53b0faa2907acaf06cef10739eb1c59a2460a7e7b8088890
-
SHA512
849f5b6034b5801c9ed5cd912aea4b3158f7d1998314322b5c05217f2929886c564cbb765d3f3a4e39daa7146add551b01e48450c1418c86df972ae5064fd97f
-
SSDEEP
3072:N+QAoil417nHoAKBa/fmUeV19s6l4UnkI6SL24EEx:7AoEoHRkaGZ19PJ2z
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3524 2180 WerFault.exe 16
Processes
-
C:\Users\Admin\AppData\Local\Temp\0f3cef0bab085e427561b34ecb7335dd.exe"C:\Users\Admin\AppData\Local\Temp\0f3cef0bab085e427561b34ecb7335dd.exe"1⤵PID:2180
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2180 -s 2242⤵
- Program crash
PID:3524
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2180 -ip 21801⤵PID:4968