Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
146s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
26/12/2023, 06:28
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
59997d5777583214d5b27f84cb696afd.exe
Resource
win7-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
59997d5777583214d5b27f84cb696afd.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
59997d5777583214d5b27f84cb696afd.exe
-
Size
60KB
-
MD5
59997d5777583214d5b27f84cb696afd
-
SHA1
edbc8fac5cc47ca9552109bb4d953fa73f797028
-
SHA256
e482fdcdaffe073fe51647e2efa6c07ca5340c7c0b2bc60a77d979243a0d0106
-
SHA512
78d7dc16c0b155fedaec468892fd84daef7049cc0d33c5397a568628a40184398934ab07b42a24d2e263e5f5115253864ae8534012f2b4d1dcd0f489ac8a169e
-
SSDEEP
768:GyxGlgPO2K080wgqAojtP0kwEYw9zWudzJZ+/yuA2tFGv0:QliORDwEYmz7Nfvu/tov0
Score
3/10
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 2256 3568 WerFault.exe 21 3868 3568 WerFault.exe 21
Processes
-
C:\Users\Admin\AppData\Local\Temp\59997d5777583214d5b27f84cb696afd.exe"C:\Users\Admin\AppData\Local\Temp\59997d5777583214d5b27f84cb696afd.exe"1⤵PID:3568
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3568 -s 3562⤵
- Program crash
PID:2256
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3568 -s 3602⤵
- Program crash
PID:3868
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 368 -p 3568 -ip 35681⤵PID:2976
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 3568 -ip 35681⤵PID:2352