Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
94s -
max time network
123s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
25/08/2024, 06:32
General
-
Target
1164-141-0x00000000013C0000-0x00000000023C0000-memory.exe
-
Size
16.0MB
-
MD5
706c0a0e8ff2657d56e0152c5d3ab2fe
-
SHA1
59cfd3a237547d5c020126e4c328b8a43308e36e
-
SHA256
97b7f74b641c0c95b12dedef6353fe5acfe43c4f88fe76ef9d890de68b5b3738
-
SHA512
df17181f2b9d67745d9eaf3f69e36e38f83180c6fd5e3c771757ddf617980dd7d06249a36d6d77c5f46d016db48f776bd028d4fbb03f4af44d90f19b61ca7213
-
SSDEEP
3072:m0s8jr4Mgt4HNkfk5PJURHLuWw5Cz4ULTga:mer4FtgkABU9CZCzrLTga
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\1164-141-0x00000000013C0000-0x00000000023C0000-memory.exe"C:\Users\Admin\AppData\Local\Temp\1164-141-0x00000000013C0000-0x00000000023C0000-memory.exe"1⤵
- System Location Discovery: System Language Discovery
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4468 -s 1922⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4468 -ip 44681⤵