Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
149s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
25/12/2023, 07:16
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
0e2257863419cbf71154665df5ecd621.exe
Resource
win7-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
0e2257863419cbf71154665df5ecd621.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
0e2257863419cbf71154665df5ecd621.exe
-
Size
50KB
-
MD5
0e2257863419cbf71154665df5ecd621
-
SHA1
4083f526b4c4e9f94aa33685c58642d554809c89
-
SHA256
09c35db182f067444610db808916da9ad4d0445094b5975291cacb466df5e177
-
SHA512
d1cd580e430d2a5ea7fe323ab200def7f75871a25e1e493389992baa45c952cac3ce8cf94e67b9241fbe9901187eb0bbf8cd3e8887d7d853f2583e3df5af0fa9
-
SSDEEP
768:01z2BYcBu4ujZ6FzruHuBNrbVp7RrBtJR/2BWuLXzJPK9VErYt4I:QB6FzruHuBNrbVhBOn89J6
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1504 3864 WerFault.exe 25
Processes
-
C:\Users\Admin\AppData\Local\Temp\0e2257863419cbf71154665df5ecd621.exe"C:\Users\Admin\AppData\Local\Temp\0e2257863419cbf71154665df5ecd621.exe"1⤵PID:3864
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3864 -s 2842⤵
- Program crash
PID:1504
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 3864 -ip 38641⤵PID:3416