Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
159s -
max time network
165s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
25/12/2023, 14:51
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
27130eaae170dfa0e981a5a064136284.exe
Resource
win7-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
27130eaae170dfa0e981a5a064136284.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
27130eaae170dfa0e981a5a064136284.exe
-
Size
56KB
-
MD5
27130eaae170dfa0e981a5a064136284
-
SHA1
02355bd4c8bb3f98c28d249eef77b68f8f568de9
-
SHA256
738b52a84a78798e9720630d10bdd4135837cdf38bc3a3ef11b9e15ece44eabe
-
SHA512
e1df390ec7ee0ec620aa670550bf95d3970abe24fd76fb1a0615125dbdf73eb975e5c2fa5d43511fc17e6c57a7c7a011bee91cb60e946eb4ff2e0d261a8efb00
-
SSDEEP
768:F75EC6O5EnWHhL+0ikw/T6JUkEtRle/nNQas:FyfoCUidkw2YtRWnNQ
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1816 3120 WerFault.exe 15
Processes
-
C:\Users\Admin\AppData\Local\Temp\27130eaae170dfa0e981a5a064136284.exe"C:\Users\Admin\AppData\Local\Temp\27130eaae170dfa0e981a5a064136284.exe"1⤵PID:3120
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3120 -s 5402⤵
- Program crash
PID:1816
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 3120 -ip 31201⤵PID:3412