Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
142s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
30/12/2023, 07:45
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
kflr-olemissfan78.exe
Resource
win7-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
kflr-olemissfan78.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
kflr-olemissfan78.exe
-
Size
1.2MB
-
MD5
e8ff0427771136c79d18ebf529a45da8
-
SHA1
1e6e7eda7faf0825daa27e3b120bb187b10b37cf
-
SHA256
1965e5e028dbb05881af75d57970f034f531c656a1b4e967b3b36a8c721a99fd
-
SHA512
4b1d8c612996ddc40b6511f08f676739c2e10e94719c10eccc2c4f0cf17d7f7f4768f396534ffe27611763d4a04bc5192f0f1ecbec55b42602400df66ebd3672
-
SSDEEP
24576:gessPug4es1pq7yFO/qi/NXNfGCjSLmwsNPd3RgLJBV1Ls2wBPUU:RuxkyFO/jNd+CjS7sNlKLJBV1Ls2wBb
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1180 2440 WerFault.exe 86
Processes
-
C:\Users\Admin\AppData\Local\Temp\kflr-olemissfan78.exe"C:\Users\Admin\AppData\Local\Temp\kflr-olemissfan78.exe"1⤵PID:2440
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2440 -s 15122⤵
- Program crash
PID:1180
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 2440 -ip 24401⤵PID:4472