Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
93s -
max time network
102s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
05/10/2024, 19:52
Static task
static1
Behavioral task
behavioral1
Sample
2d26b368eb80c3d45f7c35df7d392b1e955cd4ad4dab6b01a46c82f837837ae2.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2d26b368eb80c3d45f7c35df7d392b1e955cd4ad4dab6b01a46c82f837837ae2.exe
Resource
win10v2004-20240802-en
General
-
Target
2d26b368eb80c3d45f7c35df7d392b1e955cd4ad4dab6b01a46c82f837837ae2.exe
-
Size
41KB
-
MD5
15680745f9c1c8e95793933d1f9ecfb0
-
SHA1
43fe89d31a61472c3cd5ef46e1c4a3d7fa2d6e77
-
SHA256
2d26b368eb80c3d45f7c35df7d392b1e955cd4ad4dab6b01a46c82f837837ae2
-
SHA512
a262d51731f98d8b2745a75de69d865c944a7d56172df2e4bc44ef71e496901ead5916097a81acbadc58ea682300ced1199747f127bf1501087f7935351fd812
-
SSDEEP
384:wTJPAXYvwlpTywXI5yX2kCpPTcZuqQPxlyl7CnbgL+kuH9VotVF3Qdk:gkT19FClzVYl7YVdCV5Q2
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3216 1060 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\2d26b368eb80c3d45f7c35df7d392b1e955cd4ad4dab6b01a46c82f837837ae2.exe"C:\Users\Admin\AppData\Local\Temp\2d26b368eb80c3d45f7c35df7d392b1e955cd4ad4dab6b01a46c82f837837ae2.exe"1⤵PID:1060
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1060 -s 1362⤵
- Program crash
PID:3216
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 188 -p 1060 -ip 10601⤵PID:2584