Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
193s -
max time network
202s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
25/12/2023, 22:50
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
41567e251d863a5a3fc569cde845b33f.exe
Resource
win7-20231129-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
41567e251d863a5a3fc569cde845b33f.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
41567e251d863a5a3fc569cde845b33f.exe
-
Size
136KB
-
MD5
41567e251d863a5a3fc569cde845b33f
-
SHA1
e41fe83f357a5b20ec885fa2a4d5a80928211185
-
SHA256
e711890b1f0469e37ad4297058be0b105f7f93c09e62b0f59be9c4f15e3d117c
-
SHA512
669c9b4ae552d4eded32f02a18543966a9812464ef0d8e3bdee50aa077fce888e5b2ad0debb451fa6030219ab3dc4faac5819824e856947601071662f25aadba
-
SSDEEP
768:g/dyA3n3h8qnkoaayrE13I2x8REgOt7tV6FgDEJRlhnOycL9VRDiG:kdBKBolY3SgyvhwJBXcL9VJf
Score
3/10
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 1124 368 WerFault.exe 86 4004 368 WerFault.exe 86
Processes
-
C:\Users\Admin\AppData\Local\Temp\41567e251d863a5a3fc569cde845b33f.exe"C:\Users\Admin\AppData\Local\Temp\41567e251d863a5a3fc569cde845b33f.exe"1⤵PID:368
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 368 -s 2202⤵
- Program crash
PID:1124
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 368 -s 2242⤵
- Program crash
PID:4004
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 368 -ip 3681⤵PID:3496
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 472 -p 368 -ip 3681⤵PID:3236