Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
150s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
15/03/2024, 03:36
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ca62040f61d63d23a522a476ee8aeeec.exe
Resource
win7-20240221-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
ca62040f61d63d23a522a476ee8aeeec.exe
Resource
win10v2004-20240226-en
1 signatures
150 seconds
General
-
Target
ca62040f61d63d23a522a476ee8aeeec.exe
-
Size
171KB
-
MD5
ca62040f61d63d23a522a476ee8aeeec
-
SHA1
462fce2be4bbead0a77fe064a483d50783ceaafe
-
SHA256
73df551a2f02724c553c34b0d5ee63774b12378f1aaa4f440efd05ec23af3c73
-
SHA512
1658a43316d5174092292ed75a0a087778b2b1ec1ac176bec4a2fea977e8bfe59c0c12079e9354dadc5479c9506df43e6bafdc35c0701cb2eee8ef09a7e4d48c
-
SSDEEP
3072:oPhrcIwCBrYtZSb5XNGyyrTcmsyMoecjIDKZg1CCx5R3T6d1Pt:CrcEVrb4Pc4IDKeCE51m
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4584 1976 WerFault.exe 83
Processes
-
C:\Users\Admin\AppData\Local\Temp\ca62040f61d63d23a522a476ee8aeeec.exe"C:\Users\Admin\AppData\Local\Temp\ca62040f61d63d23a522a476ee8aeeec.exe"1⤵PID:1976
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1976 -s 3922⤵
- Program crash
PID:4584
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 1976 -ip 19761⤵PID:2772