Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
91s -
max time network
120s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
13/02/2024, 08:53
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
98fe6c597f43b987538f214ea6da5f70.exe
Resource
win7-20231129-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
98fe6c597f43b987538f214ea6da5f70.exe
Resource
win10v2004-20231222-en
1 signatures
150 seconds
General
-
Target
98fe6c597f43b987538f214ea6da5f70.exe
-
Size
61KB
-
MD5
98fe6c597f43b987538f214ea6da5f70
-
SHA1
f41da751b2714c4b138c9368a3c634359de0a1b9
-
SHA256
d0a6188681516bfd78e442de4e711811616dc730e416f72754a6b231675a7a28
-
SHA512
11c23bc82cd6c67ad332497804acbd16a93d0682a9c357508ed394fbb08eb1cc0bfff5c01ba886293ad4e5feefd8e32238905887725da8a9c75729a5ac947cc2
-
SSDEEP
1536:KYOnfpt7k5VRoGpVgfy5hf5udbUEbIxzcFPJQkoRUBpj8RFvz:AnfpsTf5VxgFRiUT8Rh
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1988 4864 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\98fe6c597f43b987538f214ea6da5f70.exe"C:\Users\Admin\AppData\Local\Temp\98fe6c597f43b987538f214ea6da5f70.exe"1⤵PID:4864
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4864 -s 4242⤵
- Program crash
PID:1988
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 464 -p 4864 -ip 48641⤵PID:3832