Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
150s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
30/12/2023, 21:12
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
1c9aea701d460742c9d041552d7514db.exe
Resource
win7-20231215-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
1c9aea701d460742c9d041552d7514db.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
1c9aea701d460742c9d041552d7514db.exe
-
Size
44KB
-
MD5
1c9aea701d460742c9d041552d7514db
-
SHA1
eee47600048c283058685af66d1fe73c9e916561
-
SHA256
7b4ffde568e0c2a29c5b32506a3f12c600bf9b7084c5d053c118912d335f96f7
-
SHA512
4ef3658127cc2afa94695c77264cf05978e6915e00fe2dbd5dee7389d0a0e0c99ae65fa92902f48bf3568398d2beb78274691d53b09e1f2dfadf8a8538b78871
-
SSDEEP
384:WxatkOG2uDpz5U/l5rOCeQepBcdsGr4oz8zlbF127uRZXdrl89bE7BYbpvZ3Gy1q:WcpGvDp5GKVQ7GGKzj0mXd4C+F0LlT
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4352 3664 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\1c9aea701d460742c9d041552d7514db.exe"C:\Users\Admin\AppData\Local\Temp\1c9aea701d460742c9d041552d7514db.exe"1⤵PID:3664
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3664 -s 5082⤵
- Program crash
PID:4352
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3664 -ip 36641⤵PID:3416