Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
149s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
31/12/2023, 06:22
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2b9415cfa1a42d48e669d141de5fa373.exe
Resource
win7-20231129-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2b9415cfa1a42d48e669d141de5fa373.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
2b9415cfa1a42d48e669d141de5fa373.exe
-
Size
262KB
-
MD5
2b9415cfa1a42d48e669d141de5fa373
-
SHA1
dc108be76b18c6e3cb7d4f081ab858a5fbab8f55
-
SHA256
147dad1ec8b536c84eec6fcbd8090ced1c98b93055108b2fecbd44bbbdc09681
-
SHA512
d0ee6bfc8007d67559c72fe516a51370254efd7e4ea5282381df304fd9189ea6dacbf3b6f517cedb04eeb5198c858cf003b6693c32b60c0a1366cde21fb76423
-
SSDEEP
6144:QnI4olIL3ZqqCBSJQfJ+YaDP54oSTasyNm:Mo2FskYajDFW
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 468 4592 WerFault.exe 16
Processes
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 4592 -ip 45921⤵PID:2136
-
C:\Users\Admin\AppData\Local\Temp\2b9415cfa1a42d48e669d141de5fa373.exe"C:\Users\Admin\AppData\Local\Temp\2b9415cfa1a42d48e669d141de5fa373.exe"1⤵PID:4592
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4592 -s 2002⤵
- Program crash
PID:468
-