Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
146s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
04/01/2024, 16:18
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
4154ab977f4ffdbc41047e20d3eff94f.exe
Resource
win7-20231215-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
4154ab977f4ffdbc41047e20d3eff94f.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
4154ab977f4ffdbc41047e20d3eff94f.exe
-
Size
375KB
-
MD5
4154ab977f4ffdbc41047e20d3eff94f
-
SHA1
81ed0997e7b2d598c4a86b26544d9fe6e3f11678
-
SHA256
f6efa6beb48f15626a65f0c40d8de9500a569d10f6955ed9f15afc9a604a3138
-
SHA512
986c447d30efd64e90b0ff63cec8ef855989410ec6b1c76a56ac1a674c894b1e1f215709587b88a1b754106abe23e11a700909293f1e8e9bc529538237d46680
-
SSDEEP
6144:dVXGYtc7MowT2eFdOywz7HUIAo92MG5uSa9kMFgjKZCyLgNwP91fCkUOxKrNLLAJ:1OAowRFd/wP08AMG5uPzFgjm9LgK9KVG
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3492 3268 WerFault.exe 86
Processes
-
C:\Users\Admin\AppData\Local\Temp\4154ab977f4ffdbc41047e20d3eff94f.exe"C:\Users\Admin\AppData\Local\Temp\4154ab977f4ffdbc41047e20d3eff94f.exe"1⤵PID:3268
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3268 -s 4602⤵
- Program crash
PID:3492
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 3268 -ip 32681⤵PID:3992