Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
87s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
26/03/2024, 22:25
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
e03e1d1a98e6a541fca47fa598ad9481.exe
Resource
win7-20240221-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
e03e1d1a98e6a541fca47fa598ad9481.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
e03e1d1a98e6a541fca47fa598ad9481.exe
-
Size
2.0MB
-
MD5
e03e1d1a98e6a541fca47fa598ad9481
-
SHA1
4ed2da2d7a0f4bcc275020bf685cbd6c44fd0763
-
SHA256
e90c201034c6907f09106196cb144115edaf1b7472a0ad8edddd19440c9c8ce2
-
SHA512
72b5042747423fb0182531ee17df6fc7e88dd0b60112221b51622b081b2d74b72a686c890f0d0b8e23cd953c8b3b0c90a327786eccbb85ed830b37b5c811eb85
-
SSDEEP
24576:BOBh4clJGxYN5PVo04RsfOW2Qa/l/m/eE9LUTKnu8yFrOehNnVFeaEzLgIc0aQTL:9WGmN5PS0I84/mWOOKnt6OwnVeffTL
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1884 5088 WerFault.exe 86
Processes
-
C:\Users\Admin\AppData\Local\Temp\e03e1d1a98e6a541fca47fa598ad9481.exe"C:\Users\Admin\AppData\Local\Temp\e03e1d1a98e6a541fca47fa598ad9481.exe"1⤵PID:5088
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5088 -s 2762⤵
- Program crash
PID:1884
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 5088 -ip 50881⤵PID:4160