Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
118s -
max time network
133s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
10/01/2024, 05:23
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
4fb23c285ced767da23291fde647539b.exe
Resource
win7-20231129-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
4fb23c285ced767da23291fde647539b.exe
Resource
win10v2004-20231222-en
1 signatures
150 seconds
General
-
Target
4fb23c285ced767da23291fde647539b.exe
-
Size
364KB
-
MD5
4fb23c285ced767da23291fde647539b
-
SHA1
dbd79b89524465ad6dd9a4f49f99dc21fbc6901f
-
SHA256
75f2e32054d1680a663fa75412bcb48da2a053d4a579648fa46b78fe67a84ce1
-
SHA512
21db8b2139a4ef83ae886e26c1e07ea8d368cf9abcbcd5d554f533ee077a30bfc76eb52c42f8d113400f975646493eb5b4310b95371e7dcea6f4198b3ac3dbf3
-
SSDEEP
6144:z4GQ8+H9g/7erPYfdADCgOFUfWFBftG+YkF/Rlaa7BCMkE7ZvY:0kqWirQlWCgO+eFBftykflaa71kepY
Score
3/10
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 5028 316 WerFault.exe 84 1276 316 WerFault.exe 84
Processes
-
C:\Users\Admin\AppData\Local\Temp\4fb23c285ced767da23291fde647539b.exe"C:\Users\Admin\AppData\Local\Temp\4fb23c285ced767da23291fde647539b.exe"1⤵PID:316
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 316 -s 5682⤵
- Program crash
PID:5028
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 316 -s 6122⤵
- Program crash
PID:1276
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 316 -ip 3161⤵PID:4132
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 528 -p 316 -ip 3161⤵PID:1624