Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
140s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
10/01/2024, 23:37
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
51ef5442418131b56ceea54ebefabaa6.exe
Resource
win7-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
51ef5442418131b56ceea54ebefabaa6.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
51ef5442418131b56ceea54ebefabaa6.exe
-
Size
321KB
-
MD5
51ef5442418131b56ceea54ebefabaa6
-
SHA1
461c23a3f0eba97d65f5e5e2385d148007fe60f1
-
SHA256
4290be69b60e687603a18d03a4cd36fc69add48a56f924b9068006e2afa4a32c
-
SHA512
a0d0ea38e7dbea5699f7dd1c6ec871719a1d83b1dac1041c52685a00f592279a850404bb0c7736d15db72aee20336d0860c29f035546eaf86e7fdfe5c5d7efc9
-
SSDEEP
6144:rNxa/EJddK7vwK1poH7td/tQqG56Prd3Z5NBA3r12Ii:rO/YddK7vw0oHprG5+3a7O
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2484 748 WerFault.exe 14
Processes
-
C:\Users\Admin\AppData\Local\Temp\51ef5442418131b56ceea54ebefabaa6.exe"C:\Users\Admin\AppData\Local\Temp\51ef5442418131b56ceea54ebefabaa6.exe"1⤵PID:748
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 748 -s 3322⤵
- Program crash
PID:2484
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 748 -ip 7481⤵PID:2796