Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
145s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
25/12/2023, 02:57
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
01610a956c23301de35ab97666658368.exe
Resource
win7-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
01610a956c23301de35ab97666658368.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
01610a956c23301de35ab97666658368.exe
-
Size
112KB
-
MD5
01610a956c23301de35ab97666658368
-
SHA1
75152c7830156a15100e37e32f31299a20f02f86
-
SHA256
9ef799d3ac148d4cec03c11be997bef79e4307d87c39e386d65389d178514928
-
SHA512
bd1bcdb2b639d65f611f41d1ce328e553991b0df549a31a7fc38041de10141a809f5d265b61a7b2920c0d8580612a12b31e5ca304537eecb9bca206cc7cb1076
-
SSDEEP
48:ye138Ax0mjBXwStADqWKAoglmwbTpFk1hqiSnt46ZV62AyOXohacsw2tvhBMCKVg:HNZBPZWKAoOmaTpFuhLYOFG04U
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2588 3908 WerFault.exe 88
Processes
-
C:\Users\Admin\AppData\Local\Temp\01610a956c23301de35ab97666658368.exe"C:\Users\Admin\AppData\Local\Temp\01610a956c23301de35ab97666658368.exe"1⤵PID:3908
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3908 -s 2242⤵
- Program crash
PID:2588
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 3908 -ip 39081⤵PID:1992