Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
144s -
max time network
130s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
30/12/2023, 11:16
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
16ef2a6384edbf6bd2594888bf782410.exe
Resource
win7-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
16ef2a6384edbf6bd2594888bf782410.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
16ef2a6384edbf6bd2594888bf782410.exe
-
Size
380KB
-
MD5
16ef2a6384edbf6bd2594888bf782410
-
SHA1
3ebfd2711ba66e4040796db181684463377ada45
-
SHA256
5fd2ef9baa827c08446ada2ea6ed30ba6b9f4f9c8b8785d6e22dafc32ea323ae
-
SHA512
4dcf2b4ea7bded88630fae86b23a7859b53b9e6e7363641bc1b8f9738badd11aa8449407915e5102a5f649c90982945a07f69aa0b503155576724c65382eb556
-
SSDEEP
6144:ULOUjxnrPr0zfUS6A9utCTCWqWvNk9weEEYwa1zPcTN6zCxHKyvdfU4tT:UpkIA9UrKNk9n4wamTNWWqkdb
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1476 5072 WerFault.exe 86
Processes
-
C:\Users\Admin\AppData\Local\Temp\16ef2a6384edbf6bd2594888bf782410.exe"C:\Users\Admin\AppData\Local\Temp\16ef2a6384edbf6bd2594888bf782410.exe"1⤵PID:5072
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5072 -s 5202⤵
- Program crash
PID:1476
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 5072 -ip 50721⤵PID:4412