Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
133s -
max time network
123s -
platform
windows10-2004_x64 -
resource
win10v2004-20240419-en -
resource tags
arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system -
submitted
07/05/2024, 10:54
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
4b877b3b7652cdc34f44920c500f7170_NEAS.exe
Resource
win7-20240220-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
4b877b3b7652cdc34f44920c500f7170_NEAS.exe
Resource
win10v2004-20240419-en
1 signatures
150 seconds
General
-
Target
4b877b3b7652cdc34f44920c500f7170_NEAS.exe
-
Size
14KB
-
MD5
4b877b3b7652cdc34f44920c500f7170
-
SHA1
38d7df9cd463dd6581e8660f38f0a43f70e2bac7
-
SHA256
3871273b0d53a0618fa60a3daaf468dfc6e42353611a98d3fea48291ac589702
-
SHA512
ddeb9eacdf68ed7662019833da7aa93248e5879f9ef901a38affc2df2b66174a44867e9577de5731a611eed1828fc2f1c9277dc106102aad3f0b2c07f95bed07
-
SSDEEP
192:maAUvh5BLf+cd4k7BH+H+H+H+H+H+H+XaKMRNBU822qDE045HQ:9AUZDfZBeeeeeeeXaVTJMDE045H
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3284 3984 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\4b877b3b7652cdc34f44920c500f7170_NEAS.exe"C:\Users\Admin\AppData\Local\Temp\4b877b3b7652cdc34f44920c500f7170_NEAS.exe"1⤵PID:3984
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3984 -s 2162⤵
- Program crash
PID:3284
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 3984 -ip 39841⤵PID:1900