Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
108s -
max time network
145s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
28/09/2024, 11:46
Static task
static1
Behavioral task
behavioral1
Sample
notmyfault.exe
Resource
win7-20240903-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
notmyfault.exe
Resource
win10v2004-20240802-en
2 signatures
150 seconds
General
-
Target
notmyfault.exe
-
Size
636KB
-
MD5
6f721a6f4b153e8058d1cb8944825c5c
-
SHA1
2f35a04c99131f8ae4bf1f48dca21738e7508345
-
SHA256
d38af269a268fa5e2e441eaea1cc6b57442e89aa302e9800b88b39aef8573c22
-
SHA512
f7bdeac2f280cd5b925adc867e6d4bc9a8526b0fb2643cb58a26480805b3f011b7d9889388cad7fcd13af4f35af248cba9ea994f9b382013dec7588adec507be
-
SSDEEP
12288:qknlRuy4NYKKIfu9yQ93gJbPqrwL/WCiNJqYaYxGWs:VLuFNYKKIfu9yQ9k2wL/WCiDdGB
Score
8/10
Malware Config
Signatures
-
Drops file in Drivers directory 2 IoCs
description ioc Process File opened for modification C:\Windows\system32\drivers\myfault.sys notmyfault.exe File created C:\Windows\system32\drivers\myfault.sys notmyfault.exe -
Suspicious behavior: LoadsDriver 2 IoCs
pid Process 656 Process not Found 656 Process not Found