Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
95s -
max time network
103s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
11/05/2024, 23:34
Static task
static1
Behavioral task
behavioral1
Sample
6e8db38975a9398ad210e13cc0175c1a6faff83d373538070b9e3de860ed99c7.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
6e8db38975a9398ad210e13cc0175c1a6faff83d373538070b9e3de860ed99c7.exe
Resource
win10v2004-20240508-en
General
-
Target
6e8db38975a9398ad210e13cc0175c1a6faff83d373538070b9e3de860ed99c7.exe
-
Size
14KB
-
MD5
019b1ab7a4b1d8ce76d20c4bd7e4e05c
-
SHA1
8abd5771c7c656b8b1f576848ce600d791b76417
-
SHA256
6e8db38975a9398ad210e13cc0175c1a6faff83d373538070b9e3de860ed99c7
-
SHA512
2a5f7e6fa5e3f8c98a58477f4f690085e27d6c8314760bf178499c2ed75ed9734100e2595a1e04a524b8335de7fdb5735fd11c59e9e1af753e4e1edfe5e76116
-
SSDEEP
384:COXBwNXquMoLLLLLLLLLLLL9VewZPDE045H:TRwwulFA
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2924 1876 WerFault.exe 79
Processes
-
C:\Users\Admin\AppData\Local\Temp\6e8db38975a9398ad210e13cc0175c1a6faff83d373538070b9e3de860ed99c7.exe"C:\Users\Admin\AppData\Local\Temp\6e8db38975a9398ad210e13cc0175c1a6faff83d373538070b9e3de860ed99c7.exe"1⤵PID:1876
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1876 -s 2162⤵
- Program crash
PID:2924
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 1876 -ip 18761⤵PID:2028