Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
149s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20240221-en -
resource tags
arch:x64arch:x86image:win10v2004-20240221-enlocale:en-usos:windows10-2004-x64system -
submitted
23/02/2024, 15:46
Static task
static1
Behavioral task
behavioral1
Sample
0ce7b7013b8955b778d459028e96207910c019a635f0b98575276704223e6e58.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0ce7b7013b8955b778d459028e96207910c019a635f0b98575276704223e6e58.exe
Resource
win10v2004-20240221-en
General
-
Target
0ce7b7013b8955b778d459028e96207910c019a635f0b98575276704223e6e58.exe
-
Size
277KB
-
MD5
12b4be336b435bac3a6cfaf56af076fc
-
SHA1
7231dc4a2d333706bc9104f5b2d153a8129df856
-
SHA256
0ce7b7013b8955b778d459028e96207910c019a635f0b98575276704223e6e58
-
SHA512
c696d78e1fe970ecaba231144077dd40260f1b76647863f41cb1c4ae280c950ee519c9f838dc0a48abd5788d842ff7117a9f84509e98b7d098769ae5e3d9259b
-
SSDEEP
6144:oxAwl/DRfkTC3dM7B+mCGBV+UdvrEFp7hKC2:oxAwlbRfky6B+mCGBjvrEH752
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 452 4912 WerFault.exe 52
Processes
-
C:\Users\Admin\AppData\Local\Temp\0ce7b7013b8955b778d459028e96207910c019a635f0b98575276704223e6e58.exe"C:\Users\Admin\AppData\Local\Temp\0ce7b7013b8955b778d459028e96207910c019a635f0b98575276704223e6e58.exe"1⤵PID:4912
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4912 -s 1802⤵
- Program crash
PID:452
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4912 -ip 49121⤵PID:2980