Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
177s -
max time network
199s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
26/12/2023, 03:25
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
50286b9613e1f2529fff417694aaf041.exe
Resource
win7-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
50286b9613e1f2529fff417694aaf041.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
50286b9613e1f2529fff417694aaf041.exe
-
Size
695KB
-
MD5
50286b9613e1f2529fff417694aaf041
-
SHA1
581179d25efdf1e7fc65c7cb9a6c2f4c1227c2d9
-
SHA256
dc1ac0dbfe9b9aedbded335cc862d8f6ccd9f29ff75c2db37d0f72297ce93b63
-
SHA512
c7ef4e8a0ebba4ad40d5e443e587832b71a116f03bb4f64c489a9498be81858d8b1816b76ece94f6ada067427606690e7f3ffa7678e5190680a21313ed07988d
-
SSDEEP
768:r1FrQT8UWFKjS0duZs7i8fo9FE5h1ERMc07GRwogIegTrU+UN9QSb:r16l9Y9FET1EllSogIegT49Qw
Score
3/10
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 4108 2224 WerFault.exe 86 2080 2224 WerFault.exe 86
Processes
-
C:\Users\Admin\AppData\Local\Temp\50286b9613e1f2529fff417694aaf041.exe"C:\Users\Admin\AppData\Local\Temp\50286b9613e1f2529fff417694aaf041.exe"1⤵PID:2224
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2224 -s 2202⤵
- Program crash
PID:4108
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2224 -s 2242⤵
- Program crash
PID:2080
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 2224 -ip 22241⤵PID:968
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 388 -p 2224 -ip 22241⤵PID:1680