Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
149s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
26/12/2023, 13:24
Static task
static1
Behavioral task
behavioral1
Sample
7239588b4480f212b2af97e5c7fc2a7d.exe
Resource
win7-20231129-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
7239588b4480f212b2af97e5c7fc2a7d.exe
Resource
win10v2004-20231222-en
1 signatures
150 seconds
General
-
Target
7239588b4480f212b2af97e5c7fc2a7d.exe
-
Size
127KB
-
MD5
7239588b4480f212b2af97e5c7fc2a7d
-
SHA1
c5699a4e629a571c3b77af9f249abdfa4c4dcaba
-
SHA256
75db7b59dd91a394cce2acf24ad472543ffc4934cd305dcb6709be2ba99d97d6
-
SHA512
72a3d91847e637674956b5b58142ab50323ccb5a91d0499ddf1bfe4c53fd958fda3fcf53b7c1a05eac6a6495495043523baa354ae21dfc7a04fd3bc650aeaf86
-
SSDEEP
1536:U+7xOzwNiy4cjZcylVQ7g35N/ihOOZKFFX3YSIAhBlysxPg9RgXns+MXeo/lGW55:szwx9lVQE2OOZ0X3kcDOZ+Ktki0G
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4448 1268 WerFault.exe 16
Processes
-
C:\Users\Admin\AppData\Local\Temp\7239588b4480f212b2af97e5c7fc2a7d.exe"C:\Users\Admin\AppData\Local\Temp\7239588b4480f212b2af97e5c7fc2a7d.exe"1⤵PID:1268
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1268 -s 2842⤵
- Program crash
PID:4448
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 1268 -ip 12681⤵PID:3448