Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
148s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
19/03/2024, 05:53
Static task
static1
Behavioral task
behavioral1
Sample
460539c5ed09472d2fa1a7da2313e585ee7077fdfc42aa9225ed91c520909687.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
460539c5ed09472d2fa1a7da2313e585ee7077fdfc42aa9225ed91c520909687.exe
Resource
win10v2004-20240226-en
General
-
Target
460539c5ed09472d2fa1a7da2313e585ee7077fdfc42aa9225ed91c520909687.exe
-
Size
14KB
-
MD5
0880fc09c427b727da571a285288240c
-
SHA1
412504e3870294174436d54c82774ae03c00d1b9
-
SHA256
460539c5ed09472d2fa1a7da2313e585ee7077fdfc42aa9225ed91c520909687
-
SHA512
a71f0c383df69a8bad3dc2e97c3a95b206a94754c1fa388a2467836099f5d5d155f11a012c6d6b6cda807e8094b0903d2f19ab081abbe27bc0cf342f68e02b02
-
SSDEEP
384:5KlxVEahqkSfRfUGUGUGUGUGUGUGUrGGGGGGGRsHlyHDE045Hyj:5K3aKqkShXXXXXXXiQjA
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3692 844 WerFault.exe 90
Processes
-
C:\Users\Admin\AppData\Local\Temp\460539c5ed09472d2fa1a7da2313e585ee7077fdfc42aa9225ed91c520909687.exe"C:\Users\Admin\AppData\Local\Temp\460539c5ed09472d2fa1a7da2313e585ee7077fdfc42aa9225ed91c520909687.exe"1⤵PID:844
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 844 -s 2162⤵
- Program crash
PID:3692
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 844 -ip 8441⤵PID:1968