Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
147s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
03/07/2024, 19:23
Static task
static1
Behavioral task
behavioral1
Sample
042b2e78ae12fad59800d00e56cb75d8e679bacadd150ab33347fbf9aba2c76b.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
042b2e78ae12fad59800d00e56cb75d8e679bacadd150ab33347fbf9aba2c76b.exe
Resource
win10v2004-20240508-en
General
-
Target
042b2e78ae12fad59800d00e56cb75d8e679bacadd150ab33347fbf9aba2c76b.exe
-
Size
760KB
-
MD5
3a71e21c81c9cf48d707f7463cadcc80
-
SHA1
f4be93297a803783fbb9f10ffe7c23cdff0b6be3
-
SHA256
042b2e78ae12fad59800d00e56cb75d8e679bacadd150ab33347fbf9aba2c76b
-
SHA512
a4773980e8d3129da2f10e2a3c3bd45448d3de1fff30f0f57ac016d76deaef53ebb4ea61573a8e2a5cc79f681e6137d74b6a23fa96d32ed5889577c554600ead
-
SSDEEP
6144:OkgiPA6R+P2Vjj+VPj92d62ASOwjQCk+wlubO52Vjj+VPj92d62ASOwj:6iP1pIPj92aSOcQC+uyIpIPj92aSOc
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3020 2604 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\042b2e78ae12fad59800d00e56cb75d8e679bacadd150ab33347fbf9aba2c76b.exe"C:\Users\Admin\AppData\Local\Temp\042b2e78ae12fad59800d00e56cb75d8e679bacadd150ab33347fbf9aba2c76b.exe"1⤵PID:2604
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2604 -s 2162⤵
- Program crash
PID:3020
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 2604 -ip 26041⤵PID:3496