Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
166s -
max time network
180s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
30/12/2023, 23:21
Static task
static1
Behavioral task
behavioral1
Sample
1fd71b091aa2d2bf87a19d55480ceb50.exe
Resource
win7-20231129-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
1fd71b091aa2d2bf87a19d55480ceb50.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
1fd71b091aa2d2bf87a19d55480ceb50.exe
-
Size
802KB
-
MD5
1fd71b091aa2d2bf87a19d55480ceb50
-
SHA1
f07deff1c4c8f30b062811a2151fb8f280c4bedc
-
SHA256
220216268ac61fdb79806c8ce1c01e899d7e4094e308ef74b68bbb0323694927
-
SHA512
5fb82e1bf679d4252815947cdbfcb9cd044180b2d4f5eec0c76bf5f2bec7d975394be9ec54976653ef2d676f1cee5523d6161d0377ac636fdc3c55d7bdf7021b
-
SSDEEP
24576:xl1HyqDjLsAwtMsbIVTKLQ6cTAwK0cnApQ51e8NT2:xDHBzTwtPsYMt0f0jpQPK
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3784 3116 WerFault.exe 87
Processes
-
C:\Users\Admin\AppData\Local\Temp\1fd71b091aa2d2bf87a19d55480ceb50.exe"C:\Users\Admin\AppData\Local\Temp\1fd71b091aa2d2bf87a19d55480ceb50.exe"1⤵PID:3116
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3116 -s 4842⤵
- Program crash
PID:3784
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 3116 -ip 31161⤵PID:2592