Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
148s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
19/03/2024, 08:42
Behavioral task
behavioral1
Sample
2184-0-0x0000000000400000-0x000000000043D000-memory.exe
Resource
win7-20240221-en
1 signatures
150 seconds
General
-
Target
2184-0-0x0000000000400000-0x000000000043D000-memory.exe
-
Size
244KB
-
MD5
1c7e0ac65a53e7b621bfd7734096216a
-
SHA1
394be35d444a11178c6a99bcfbdf525ce1599cae
-
SHA256
b229953af53cd20172885e94b5453f03cd14075d31e1777333ef82818cd01f8e
-
SHA512
223042ced09b1646835ed45e526a24c2701a048aa990cb4c8878ebc9cb75dd84cb6f78f574ab1ee6c7a347beade1a5bf5bb87f37a34615a0a3f05ca37f825036
-
SSDEEP
1536:UYz/E8hW9NdYAygNlvhIoOl9SAKD7PNch1ZmmImh1ADN8blGe5SagvHLNaV8RJ3n:Um/E8k9ZjpIL+zNch12KbAwSaSpJSp8
Malware Config
Signatures
Processes
-
C:\Users\Admin\AppData\Local\Temp\2184-0-0x0000000000400000-0x000000000043D000-memory.exe"C:\Users\Admin\AppData\Local\Temp\2184-0-0x0000000000400000-0x000000000043D000-memory.exe"1⤵PID:1720
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1720 -s 2162⤵
- Program crash
PID:3536
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1720 -ip 17201⤵PID:4572