Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
138s -
max time network
170s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
04/02/2024, 14:49
Static task
static1
Behavioral task
behavioral1
Sample
VirusShare_8b6c087ce23acbe5540e2e799e215010.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
VirusShare_8b6c087ce23acbe5540e2e799e215010.exe
Resource
win10v2004-20231215-en
General
-
Target
VirusShare_8b6c087ce23acbe5540e2e799e215010.exe
-
Size
346KB
-
MD5
8b6c087ce23acbe5540e2e799e215010
-
SHA1
6f4d9a8e3fb4dcc9e71ac88a2042f86873ba9593
-
SHA256
26b61a616d9ff0fc7e76c5c5d5058b6a05eec82c16b8206b0a3f057e82e23e71
-
SHA512
31a76bf4230f2683d768917c172a12f898f309cef4dae9087aecf6f70b66a32c6de2b79c66564db0661901306d0cef029446be0f337479a756d9ff656512228d
-
SSDEEP
6144:ltdN0c+xadEDmU5JXN4/6/1B4fAd9r+KJQlStcZeNtC/ZfyBeNPTfW:rD0c+0EjX4/6/1B4fAd9KKJ6fIORqkNy
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3764 4508 WerFault.exe 78
Processes
-
C:\Users\Admin\AppData\Local\Temp\VirusShare_8b6c087ce23acbe5540e2e799e215010.exe"C:\Users\Admin\AppData\Local\Temp\VirusShare_8b6c087ce23acbe5540e2e799e215010.exe"1⤵PID:4508
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4508 -s 4922⤵
- Program crash
PID:3764
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 368 -p 4508 -ip 45081⤵PID:1060