Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
145s -
max time network
126s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
25/12/2023, 03:11
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
021b0cbf226901c3dff865badac14606.exe
Resource
win7-20231129-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
021b0cbf226901c3dff865badac14606.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
021b0cbf226901c3dff865badac14606.exe
-
Size
121KB
-
MD5
021b0cbf226901c3dff865badac14606
-
SHA1
de36ae59c8f71b7d7391d52ea2343a1f960908ee
-
SHA256
7dfeebeb24919749a64ea866080c81d0ab607b42dd27e28a709cef984265c908
-
SHA512
87354c23fad1d1cccdb028e6e656a18cd9417e7e4fbbe4da1297c200e7710b2f0b2a79073ca42252a27861a3af949cf63ffd1a4497b0a9c6d331035fa44334cc
-
SSDEEP
3072:/o5GoZYquZIPJCr743kerpmYExqHXhT5RnaY8Is7fCVz9VWokC:/oryZICr743keXnHEIqfCz4ok
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2716 5668 WerFault.exe 16
Processes
-
C:\Users\Admin\AppData\Local\Temp\021b0cbf226901c3dff865badac14606.exe"C:\Users\Admin\AppData\Local\Temp\021b0cbf226901c3dff865badac14606.exe"1⤵PID:5668
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5668 -s 4962⤵
- Program crash
PID:2716
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 376 -p 5668 -ip 56681⤵PID:1564