Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
93s -
max time network
122s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
25/01/2024, 14:06
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
74e2ab6cb5040af8e3bbc7bccc3e8a87.exe
Resource
win7-20231129-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
74e2ab6cb5040af8e3bbc7bccc3e8a87.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
74e2ab6cb5040af8e3bbc7bccc3e8a87.exe
-
Size
55KB
-
MD5
74e2ab6cb5040af8e3bbc7bccc3e8a87
-
SHA1
bca15b914bf87bd1adc4fe6f83c44f3d69582169
-
SHA256
ac9fa069164820962c66941c431da3f0e3be03920fab3b520b2ce461e5f191db
-
SHA512
90046f8f5214755af6e4b96af36c98f6ec4c6c30d4c959caab18878ded1482ea70a82a9c313f6f0aaf5d910661243c1b766cb444eb9179b8f8ead76c76715848
-
SSDEEP
768:MCl9uBUz4ng++7uhzGQ61WwxzFut847SlYmuuuuuuuSOvu8iYTmpX1BK7/1H5RXQ:MCl9uBUalXctbu8lMa0R
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1896 2696 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\74e2ab6cb5040af8e3bbc7bccc3e8a87.exe"C:\Users\Admin\AppData\Local\Temp\74e2ab6cb5040af8e3bbc7bccc3e8a87.exe"1⤵PID:2696
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2696 -s 4002⤵
- Program crash
PID:1896
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 200 -p 2696 -ip 26961⤵PID:3476