Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
150s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20240221-en -
resource tags
arch:x64arch:x86image:win10v2004-20240221-enlocale:en-usos:windows10-2004-x64system -
submitted
24/02/2024, 20:03
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
a2a192e3c83fb3453b6bb5399b9e6e5f.exe
Resource
win7-20240215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
a2a192e3c83fb3453b6bb5399b9e6e5f.exe
Resource
win10v2004-20240221-en
1 signatures
150 seconds
General
-
Target
a2a192e3c83fb3453b6bb5399b9e6e5f.exe
-
Size
252KB
-
MD5
a2a192e3c83fb3453b6bb5399b9e6e5f
-
SHA1
30f7262a2129e07554b43ac2f66c9ba682e872d3
-
SHA256
a8a12e501c5cd68326f4929845f956668c951d440fbd9af021af8a0230f40cc8
-
SHA512
ffc08cfdabe409149a71ad2d47498b9a4f657bbad047d985357790890e047acd8d3162f616f78a571fc5f0883f5daf5712f9d1a8cbab9d5bbfc395131a35d30c
-
SSDEEP
6144:eiLYMqGgt6zIUrATsBhJxIDcfftmL2c8uEC:VYtCrAUIAdmL2jK
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1676 5464 WerFault.exe 17
Processes
-
C:\Users\Admin\AppData\Local\Temp\a2a192e3c83fb3453b6bb5399b9e6e5f.exe"C:\Users\Admin\AppData\Local\Temp\a2a192e3c83fb3453b6bb5399b9e6e5f.exe"1⤵PID:5464
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5464 -s 2762⤵
- Program crash
PID:1676
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 5464 -ip 54641⤵PID:3636