Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
137s -
max time network
104s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
25/12/2023, 22:09
Static task
static1
Behavioral task
behavioral1
Sample
3f1050dde1b63b6593dbff6c848a3838.exe
Resource
win7-20231215-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
3f1050dde1b63b6593dbff6c848a3838.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
3f1050dde1b63b6593dbff6c848a3838.exe
-
Size
801KB
-
MD5
3f1050dde1b63b6593dbff6c848a3838
-
SHA1
1c1345e16a452eae92ea14eada6ffd200dd283a3
-
SHA256
14ad883f0b6d71cd2d7cbd4bd45dc3f04c8d623049fedec7a79ea23047b725f7
-
SHA512
007eb9e1c9dec580bf4bae35f48cbf388e487731953a69d767dd2e8a109fed9bd40affb203753de1e7d17c35382d1299eba8e73c69f072d88221d47b7592817f
-
SSDEEP
24576:g92jUkQSUvlfQgWnwpeudK3EmfZa3nK8NT:g4jajlhWnYeudaEwa3X
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1592 1464 WerFault.exe 13
Processes
-
C:\Users\Admin\AppData\Local\Temp\3f1050dde1b63b6593dbff6c848a3838.exe"C:\Users\Admin\AppData\Local\Temp\3f1050dde1b63b6593dbff6c848a3838.exe"1⤵PID:1464
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1464 -s 4842⤵
- Program crash
PID:1592
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 1464 -ip 14641⤵PID:2176