Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
145s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
03/02/2024, 13:29
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
8c7133cb5817797ee71fd02f5e23a50d.exe
Resource
win7-20231215-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
8c7133cb5817797ee71fd02f5e23a50d.exe
Resource
win10v2004-20231222-en
1 signatures
150 seconds
General
-
Target
8c7133cb5817797ee71fd02f5e23a50d.exe
-
Size
528KB
-
MD5
8c7133cb5817797ee71fd02f5e23a50d
-
SHA1
6db7cc8b11ac3320d53a6fcb21a04eb5d19902e1
-
SHA256
e02f691b5697c4036a2635a6991c5ce007dbb6c180afa746d957d4510b4b8cb6
-
SHA512
5c6e024b1fef86189c3f3a7bcb8a32d7cdfd10bc43df7316a6048d87883fb128a7090401a8069bfed20251029666a4a0296be493206ed9081137c0e646ce628e
-
SSDEEP
12288:jvtMV9c+5cvqh5V7x3+NNgc56lVrCTORYAymwVUvrMU/:jveV9cMuG55YNGckqqN3Mq
Score
3/10
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 1380 536 WerFault.exe 59 4876 536 WerFault.exe 59
Processes
-
C:\Users\Admin\AppData\Local\Temp\8c7133cb5817797ee71fd02f5e23a50d.exe"C:\Users\Admin\AppData\Local\Temp\8c7133cb5817797ee71fd02f5e23a50d.exe"1⤵PID:536
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 536 -s 5602⤵
- Program crash
PID:1380
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 536 -s 5602⤵
- Program crash
PID:4876
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 364 -p 536 -ip 5361⤵PID:4996
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 528 -p 536 -ip 5361⤵PID:4976