Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
142s -
max time network
145s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
24/12/2023, 20:42
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
11a2b4de6bcec6a08d9b2bd008fd1a3e.exe
Resource
win7-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
11a2b4de6bcec6a08d9b2bd008fd1a3e.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
11a2b4de6bcec6a08d9b2bd008fd1a3e.exe
-
Size
266KB
-
MD5
11a2b4de6bcec6a08d9b2bd008fd1a3e
-
SHA1
443c56a2a828976b892801c0bd52878de3ba685c
-
SHA256
bdc35cf7b939fac4d3a67f9902c9af6f2d8b33b9cd45dc73581f79b76227888e
-
SHA512
f589af3e06ded50cc85c5a0bc86d17c72651e8f477ff7390c85f0f29acdb9ec913c23115d3c72d03c1885ccad662acc58f3780c7e6c3c93cc75fd743df886a4d
-
SSDEEP
6144:4R/N5N573uw4Y1K7P4bU8wViPO/LQTh2p5gP2XQ2beK:4nJN48Kb4UVi2/Ed2jq2Db
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 764 2808 WerFault.exe 61
Processes
-
C:\Users\Admin\AppData\Local\Temp\11a2b4de6bcec6a08d9b2bd008fd1a3e.exe"C:\Users\Admin\AppData\Local\Temp\11a2b4de6bcec6a08d9b2bd008fd1a3e.exe"1⤵PID:2808
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2808 -s 2242⤵
- Program crash
PID:764
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 2808 -ip 28081⤵PID:1268