Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
149s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
25/12/2023, 15:40
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2a111ee89117801815336ee54e29b725.exe
Resource
win7-20231215-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2a111ee89117801815336ee54e29b725.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
2a111ee89117801815336ee54e29b725.exe
-
Size
204KB
-
MD5
2a111ee89117801815336ee54e29b725
-
SHA1
7c28af9006c9d69c9c0f8ec911c44a76a007c512
-
SHA256
2fe7d6833b1742c3efc8869cd01d4edfa49abbc54e4feb3eda3e29f2822332c9
-
SHA512
ae602c3e391c119d2bf3715e6eb50f9010442f76c61aa4b6efa83678b402cd7ffcf6d4b6aa1717376f1cf4d12321d3de2b7df0dd99dc257f349be852cee1d20f
-
SSDEEP
3072:VwQCSes3twq2J1JdPyTgbIoL/TcEruFKSXqEKldAhk32Frbyl6NXdI208wer:VwQtesEJHiF0TzuQbEKYK2FbNt/r
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3344 3660 WerFault.exe 16
Processes
-
C:\Users\Admin\AppData\Local\Temp\2a111ee89117801815336ee54e29b725.exe"C:\Users\Admin\AppData\Local\Temp\2a111ee89117801815336ee54e29b725.exe"1⤵PID:3660
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3660 -s 3522⤵
- Program crash
PID:3344
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 3660 -ip 36601⤵PID:3744