Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
93s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
01/02/2024, 11:10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
86bf9e9807f451f7688f04c6bdab1237.exe
Resource
win7-20231215-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
86bf9e9807f451f7688f04c6bdab1237.exe
Resource
win10v2004-20231222-en
1 signatures
150 seconds
General
-
Target
86bf9e9807f451f7688f04c6bdab1237.exe
-
Size
4.5MB
-
MD5
86bf9e9807f451f7688f04c6bdab1237
-
SHA1
0ee863231cf6e1aa1dd7c701b64f6a1a9acb931f
-
SHA256
780a958b5172efc4e1146ec8cb5688c30e54a8d632b44f971cf9987517c9fd11
-
SHA512
8224f59077ea88b057f2cdc7cad87c224e3815ed03d6cbdf9b0b45f051caa152f2259db6bdf88fefcf1c51d63ccc7b8a1296386c46dcb20891b1dd3643f8d754
-
SSDEEP
98304:j3QbzVLV9pJ+F0SR+d28w8jrptjN4+lqL+ch5:mVLV9pJesdZ6Sch5
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2188 1564 WerFault.exe 84
Processes
-
C:\Users\Admin\AppData\Local\Temp\86bf9e9807f451f7688f04c6bdab1237.exe"C:\Users\Admin\AppData\Local\Temp\86bf9e9807f451f7688f04c6bdab1237.exe"1⤵PID:1564
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1564 -s 2722⤵
- Program crash
PID:2188
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1564 -ip 15641⤵PID:1932