Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
149s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
08/03/2024, 13:35
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
bb650a6a3baa36352cc7e5af8c799eb7.exe
Resource
win7-20240221-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
bb650a6a3baa36352cc7e5af8c799eb7.exe
Resource
win10v2004-20240226-en
1 signatures
150 seconds
General
-
Target
bb650a6a3baa36352cc7e5af8c799eb7.exe
-
Size
52KB
-
MD5
bb650a6a3baa36352cc7e5af8c799eb7
-
SHA1
e2efbf7083f59407df8c0db533ecc263b065c7ca
-
SHA256
f832cf4eef0b58431a0c648300bdb2a2cf70fe5b7aad301752f4240f269cf435
-
SHA512
11ed90de346b578e779a70913ec8f3073ae3c809e2d46b05a7a1a4aca9f42fb3cda0125bf4f05d91b2c29898da5e1bdb55dc27e26bb465a2fcf10f5f9c54ecfb
-
SSDEEP
768:YwrH+iN27nHaSORXZCUMh4AzNI+BGxYnjlDusjc99+rCjo0/0b2xaqMoNBrsBGdu:YwX2rpOcuAzG+Uxmjlc9o2Uqrsmcxpf
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3676 3292 WerFault.exe 88
Processes
-
C:\Users\Admin\AppData\Local\Temp\bb650a6a3baa36352cc7e5af8c799eb7.exe"C:\Users\Admin\AppData\Local\Temp\bb650a6a3baa36352cc7e5af8c799eb7.exe"1⤵PID:3292
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3292 -s 2642⤵
- Program crash
PID:3676
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 3292 -ip 32921⤵PID:3608