Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
148s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
06/03/2024, 04:32
Static task
static1
Behavioral task
behavioral1
Sample
b683a9f2254f142cbc4f80352a6d736a.exe
Resource
win7-20240221-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
b683a9f2254f142cbc4f80352a6d736a.exe
Resource
win10v2004-20240226-en
1 signatures
150 seconds
General
-
Target
b683a9f2254f142cbc4f80352a6d736a.exe
-
Size
172KB
-
MD5
b683a9f2254f142cbc4f80352a6d736a
-
SHA1
660bf074988909395986ababb1885cc320008b02
-
SHA256
357aa5280b9db478a947401067824eddf89e01148dce33ab05a6cb38ceb4c073
-
SHA512
dc64eb4154622845e246a35b0f5b9d1328acbfde02467bf570cb5e6f2c4374a1c800647cb92d34b385a9c875f5463c9ca7653f948e2251f6de6b1f62592dbea0
-
SSDEEP
3072:3pXwXbzt7/kk95u/xiepdd0tAYF3DaW3BVmCUsKEeV:SrRTk25uJ1pf0nFzaMBVmtsKb
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3548 4768 WerFault.exe 88
Processes
-
C:\Users\Admin\AppData\Local\Temp\b683a9f2254f142cbc4f80352a6d736a.exe"C:\Users\Admin\AppData\Local\Temp\b683a9f2254f142cbc4f80352a6d736a.exe"1⤵PID:4768
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4768 -s 2842⤵
- Program crash
PID:3548
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4768 -ip 47681⤵PID:876