Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
146s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
04/03/2024, 13:52
Static task
static1
Behavioral task
behavioral1
Sample
b249dcfbe72dc741c6cdef6a19a052ec.exe
Resource
win7-20240220-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
b249dcfbe72dc741c6cdef6a19a052ec.exe
Resource
win10v2004-20240226-en
1 signatures
150 seconds
General
-
Target
b249dcfbe72dc741c6cdef6a19a052ec.exe
-
Size
294KB
-
MD5
b249dcfbe72dc741c6cdef6a19a052ec
-
SHA1
53163fcc6db4fa759a9e0e33f3944c1b6371eed3
-
SHA256
90aba696da20cc79658922318e2624eb5ddea6cd5c08bea2018617ae79026da3
-
SHA512
e2c680db5625208bc4d8656a1a4718c5fa6f06c325039a93de0361e1846c9ff9779d86af311d0278910718a62f04af899b9af8fbaa2fb5c86373bc997c5da072
-
SSDEEP
6144:NiGtsLBZAlqNC+Y+1PTG/qm/PgCnmUSFMhl4Q0+M/oI29QKS:gGtsLBWt+d1PTEn/iUSFM8Q0+rI2jS
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2136 5108 WerFault.exe 85
Processes
-
C:\Users\Admin\AppData\Local\Temp\b249dcfbe72dc741c6cdef6a19a052ec.exe"C:\Users\Admin\AppData\Local\Temp\b249dcfbe72dc741c6cdef6a19a052ec.exe"1⤵PID:5108
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5108 -s 2842⤵
- Program crash
PID:2136
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 5108 -ip 51081⤵PID:392