Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
151s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
19/09/2022, 20:14
Static task
static1
Behavioral task
behavioral1
Sample
6d13396fbfc3cb55115c0c776ca0c98d2239b0b9fe3773495bc507693219fc5e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6d13396fbfc3cb55115c0c776ca0c98d2239b0b9fe3773495bc507693219fc5e.exe
Resource
win10v2004-20220901-en
General
-
Target
6d13396fbfc3cb55115c0c776ca0c98d2239b0b9fe3773495bc507693219fc5e.exe
-
Size
56KB
-
MD5
dca80c1d3f2b769c6033443f71d3ff35
-
SHA1
c62cf89d04e88f106dc168008b36b38ea39173a5
-
SHA256
6d13396fbfc3cb55115c0c776ca0c98d2239b0b9fe3773495bc507693219fc5e
-
SHA512
eaa11e3d5945c89d88e7f2b975c24c1106a5eace93938424e1c824be01b1e82ff39726158229e0f2d923a33594b54326ebdccb93e005444b61b96755373fb534
-
SSDEEP
1536:rtyQ1vio1eAaUEFjnN0/56hIMPHq4LItx:rMWq6eACH0/56+YKrT
Malware Config
Signatures
-
Modifies registry class 4 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{91B48F7B-88F0-B598-7A4C-B4E5C7B5DA91} 6d13396fbfc3cb55115c0c776ca0c98d2239b0b9fe3773495bc507693219fc5e.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{91B48F7B-88F0-B598-7A4C-B4E5C7B5DA91}\ = "rqjbtshhhlqkbbrb" 6d13396fbfc3cb55115c0c776ca0c98d2239b0b9fe3773495bc507693219fc5e.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{91B48F7B-88F0-B598-7A4C-B4E5C7B5DA91}\LocalServer32 6d13396fbfc3cb55115c0c776ca0c98d2239b0b9fe3773495bc507693219fc5e.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{91B48F7B-88F0-B598-7A4C-B4E5C7B5DA91}\LocalServer32\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\6d13396fbfc3cb55115c0c776ca0c98d2239b0b9fe3773495bc507693219fc5e.exe" 6d13396fbfc3cb55115c0c776ca0c98d2239b0b9fe3773495bc507693219fc5e.exe