Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
145s -
max time network
141s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
28/12/2023, 21:19
Behavioral task
behavioral1
Sample
f8df9cadf3cfd31cdf5f4f1bd1db7a5d.exe
Resource
win7-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
f8df9cadf3cfd31cdf5f4f1bd1db7a5d.exe
Resource
win10v2004-20231222-en
1 signatures
150 seconds
General
-
Target
f8df9cadf3cfd31cdf5f4f1bd1db7a5d.exe
-
Size
1.3MB
-
MD5
f8df9cadf3cfd31cdf5f4f1bd1db7a5d
-
SHA1
528633e1294913f5eddb4195a0a20c2cccba3d06
-
SHA256
c0071ae2cebf286a8e6bc622cb81b1511939b2b268a0f838c0aba373568223f4
-
SHA512
2419d6519aaf990f9fe1d37c78e3cf75bbe65d5cc64ccf03cb7b3b394db5d5bd44fb4784ecc1551e56574554679825b9bbcd9475e98411757361364c49f2fc6c
-
SSDEEP
24576:E0x1QcyghdbSwHGMn0WEDJ5oUbuM1PWkXzxM:nx+cyUgwRn01dyUbuMAkjxM
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3848 4052 WerFault.exe 14
Processes
-
C:\Users\Admin\AppData\Local\Temp\f8df9cadf3cfd31cdf5f4f1bd1db7a5d.exe"C:\Users\Admin\AppData\Local\Temp\f8df9cadf3cfd31cdf5f4f1bd1db7a5d.exe"1⤵PID:4052
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4052 -s 2242⤵
- Program crash
PID:3848
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4052 -ip 40521⤵PID:436