Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
150s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
07/03/2024, 19:46
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
b980145d888b56c6bf52c6c9332098ce.exe
Resource
win7-20240220-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
b980145d888b56c6bf52c6c9332098ce.exe
Resource
win10v2004-20240226-en
1 signatures
150 seconds
General
-
Target
b980145d888b56c6bf52c6c9332098ce.exe
-
Size
128KB
-
MD5
b980145d888b56c6bf52c6c9332098ce
-
SHA1
3b445171c8f5568d1b1c814870333c7813430b5e
-
SHA256
5152c064cd31273a82ce31e6ac60851b2c9f71d12f5251db3ca58f25edbeea6b
-
SHA512
64d8ef065988c0903f73822d003c696ec35f61b71c7f42131a38068c238c05c14333a9bf39d06140aa4df16cb809bfd3d70596963e83643c57a685344ca6ab54
-
SSDEEP
3072:rhY8WFCZbPwrjpl+8X3oOcMJ0OYNAKiJ37k:rhYGSf1X3vc83k
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4544 4288 WerFault.exe 86
Processes
-
C:\Users\Admin\AppData\Local\Temp\b980145d888b56c6bf52c6c9332098ce.exe"C:\Users\Admin\AppData\Local\Temp\b980145d888b56c6bf52c6c9332098ce.exe"1⤵PID:4288
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4288 -s 6082⤵
- Program crash
PID:4544
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 460 -p 4288 -ip 42881⤵PID:2824