Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
71s -
max time network
65s -
platform
windows10-2004_x64 -
resource
win10v2004-20240419-en -
resource tags
arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system -
submitted
29/04/2024, 16:01
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
cb6d9e0da0d0314e10991ba79e9da46be1b9d3b8ee6bc576c89c4a573940016e.exe
Resource
win10v2004-20240419-en
1 signatures
150 seconds
General
-
Target
cb6d9e0da0d0314e10991ba79e9da46be1b9d3b8ee6bc576c89c4a573940016e.exe
-
Size
347KB
-
MD5
3b1e4971101aa30374bd2f6c787adbd1
-
SHA1
80d7876c92d0bfcceb4f5d453baac27812f52dcc
-
SHA256
cb6d9e0da0d0314e10991ba79e9da46be1b9d3b8ee6bc576c89c4a573940016e
-
SHA512
8a066368e3db2cc3bd8146ff9b9a4ac5de3acc5ae13bd4501864603eafe0aeae8369eb3517dc530f1f2d8a11ab2d7a171b0ce4d4391a8bff551c0e58f10f6c00
-
SSDEEP
6144:b4ZQNIo0QKjHUGwo2ve4u5b85/k1sZtl8OguSDU4pt3hdno6:boQNUQ+HUGj2v4981MsXl87uSDU4pe6
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1580 3292 WerFault.exe 83
Processes
-
C:\Users\Admin\AppData\Local\Temp\cb6d9e0da0d0314e10991ba79e9da46be1b9d3b8ee6bc576c89c4a573940016e.exe"C:\Users\Admin\AppData\Local\Temp\cb6d9e0da0d0314e10991ba79e9da46be1b9d3b8ee6bc576c89c4a573940016e.exe"1⤵PID:3292
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3292 -s 6962⤵
- Program crash
PID:1580
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 3292 -ip 32921⤵PID:3840