Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
47s -
max time network
53s -
platform
windows7_x64 -
resource
win7-20220901-en -
resource tags
arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system -
submitted
02/10/2022, 11:15
Static task
static1
Behavioral task
behavioral1
Sample
e001b8ee7e1942eec54ab1d3db619c4e9ffc1205efbe203a191df6b26adcccb9.exe
Resource
win7-20220901-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
e001b8ee7e1942eec54ab1d3db619c4e9ffc1205efbe203a191df6b26adcccb9.exe
Resource
win10v2004-20220812-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
e001b8ee7e1942eec54ab1d3db619c4e9ffc1205efbe203a191df6b26adcccb9.exe
-
Size
160KB
-
MD5
7a1e238160a12366ad705873b8826760
-
SHA1
2165875330ef9087762e95abb915a1b350291a8a
-
SHA256
e001b8ee7e1942eec54ab1d3db619c4e9ffc1205efbe203a191df6b26adcccb9
-
SHA512
43a90819564b51a8a55dce4a202c1f414e0e208b9cf5096bdd291adaa17e4ac68257964a381778af611f021cb581f41d95da8e9b7fce89b2ce79ce5539cec6cf
-
SSDEEP
3072:jmVW8iTX/3RfldjjXq1+0cxxsWEL02fXcIp08MoeGBYheFT3zqnn:aM7jJlRexYTHYZMGOUFrzs
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\winxcfg.exe = "C:\\Windows\\system32\\winxcfg.exe" e001b8ee7e1942eec54ab1d3db619c4e9ffc1205efbe203a191df6b26adcccb9.exe -
Drops file in System32 directory 33 IoCs
description ioc Process File created C:\Windows\SysWOW64\macromd\cute girl giving head.exe e001b8ee7e1942eec54ab1d3db619c4e9ffc1205efbe203a191df6b26adcccb9.exe File created C:\Windows\SysWOW64\macromd\AIM Account Stealer.exe e001b8ee7e1942eec54ab1d3db619c4e9ffc1205efbe203a191df6b26adcccb9.exe File created C:\Windows\SysWOW64\macromd\neighbor boy fucking grandma after mowing her grass.mpg.pif e001b8ee7e1942eec54ab1d3db619c4e9ffc1205efbe203a191df6b26adcccb9.exe File created C:\Windows\SysWOW64\macromd\sluty cock sucking chick.mpg.pif e001b8ee7e1942eec54ab1d3db619c4e9ffc1205efbe203a191df6b26adcccb9.exe File created C:\Windows\SysWOW64\macromd\Counter Strike CD Keygen.exe e001b8ee7e1942eec54ab1d3db619c4e9ffc1205efbe203a191df6b26adcccb9.exe File created C:\Windows\SysWOW64\macromd\Microsoft Office XP (english) key generator.exe e001b8ee7e1942eec54ab1d3db619c4e9ffc1205efbe203a191df6b26adcccb9.exe File created C:\Windows\SysWOW64\macromd\euro moma with big headlights and scrumptous ass.mpg.pif e001b8ee7e1942eec54ab1d3db619c4e9ffc1205efbe203a191df6b26adcccb9.exe File created C:\Windows\SysWOW64\macromd\bad gal being tied and bound.mpg.pif e001b8ee7e1942eec54ab1d3db619c4e9ffc1205efbe203a191df6b26adcccb9.exe File created C:\Windows\SysWOW64\macromd\3 teen blonde babes chin deep in pussy sauce.mpg.pif e001b8ee7e1942eec54ab1d3db619c4e9ffc1205efbe203a191df6b26adcccb9.exe File created C:\Windows\SysWOW64\macromd\cute teen with her hole spread wide open.mpg.pif e001b8ee7e1942eec54ab1d3db619c4e9ffc1205efbe203a191df6b26adcccb9.exe File created C:\Windows\SysWOW64\winxcfg.exe e001b8ee7e1942eec54ab1d3db619c4e9ffc1205efbe203a191df6b26adcccb9.exe File created C:\Windows\SysWOW64\macromd\Warcraft 3 battle.net serial generator.exe e001b8ee7e1942eec54ab1d3db619c4e9ffc1205efbe203a191df6b26adcccb9.exe File created C:\Windows\SysWOW64\macromd\hotmail account sniffer.exe e001b8ee7e1942eec54ab1d3db619c4e9ffc1205efbe203a191df6b26adcccb9.exe File created C:\Windows\SysWOW64\macromd\ass ripping interracial fuckin.mpg.pif e001b8ee7e1942eec54ab1d3db619c4e9ffc1205efbe203a191df6b26adcccb9.exe File created C:\Windows\SysWOW64\macromd\naturaly tan babe with gorgous body.mpg.pif e001b8ee7e1942eec54ab1d3db619c4e9ffc1205efbe203a191df6b26adcccb9.exe File created C:\Windows\SysWOW64\macromd\MSN Flooder.exe e001b8ee7e1942eec54ab1d3db619c4e9ffc1205efbe203a191df6b26adcccb9.exe File created C:\Windows\SysWOW64\macromd\horny housewife looking for some action.mpg.pif e001b8ee7e1942eec54ab1d3db619c4e9ffc1205efbe203a191df6b26adcccb9.exe File created C:\Windows\SysWOW64\macromd\old lady in bra and corset with dildo.mpg.pif e001b8ee7e1942eec54ab1d3db619c4e9ffc1205efbe203a191df6b26adcccb9.exe File created C:\Windows\SysWOW64\macromd\extremely fine hoine with incredible sweet twat.mpg.pif e001b8ee7e1942eec54ab1d3db619c4e9ffc1205efbe203a191df6b26adcccb9.exe File created C:\Windows\SysWOW64\macromd\blonde showing her pussy to her neighbor.mpg.pif e001b8ee7e1942eec54ab1d3db619c4e9ffc1205efbe203a191df6b26adcccb9.exe File created C:\Windows\SysWOW64\macromd\pigtail black babe with pretty boy.mpg.pif e001b8ee7e1942eec54ab1d3db619c4e9ffc1205efbe203a191df6b26adcccb9.exe File created C:\Windows\SysWOW64\macromd\msncracker.exe e001b8ee7e1942eec54ab1d3db619c4e9ffc1205efbe203a191df6b26adcccb9.exe File created C:\Windows\SysWOW64\macromd\aimcracker.exe e001b8ee7e1942eec54ab1d3db619c4e9ffc1205efbe203a191df6b26adcccb9.exe File created C:\Windows\SysWOW64\macromd\sexy pink pussy girl taking it off.mpg.pif e001b8ee7e1942eec54ab1d3db619c4e9ffc1205efbe203a191df6b26adcccb9.exe File created C:\Windows\SysWOW64\macromd\hard cock cumming in her mouth.mpg.pif e001b8ee7e1942eec54ab1d3db619c4e9ffc1205efbe203a191df6b26adcccb9.exe File created C:\Windows\SysWOW64\macromd\gettin it hard up the ass.mpg.pif e001b8ee7e1942eec54ab1d3db619c4e9ffc1205efbe203a191df6b26adcccb9.exe File created C:\Windows\SysWOW64\macromd\this really wild insane groupsex.mpg.pif e001b8ee7e1942eec54ab1d3db619c4e9ffc1205efbe203a191df6b26adcccb9.exe File created C:\Windows\SysWOW64\macromd\ebony girl with massive hooters.mpg.pif e001b8ee7e1942eec54ab1d3db619c4e9ffc1205efbe203a191df6b26adcccb9.exe File created C:\Windows\SysWOW64\macromd\Jenna Jameson Nude Gang Bang Forced Cum Blowjob.mpg.pif e001b8ee7e1942eec54ab1d3db619c4e9ffc1205efbe203a191df6b26adcccb9.exe File created C:\Windows\SysWOW64\macromd\amateur orgy at a swinger party.mpg.pif e001b8ee7e1942eec54ab1d3db619c4e9ffc1205efbe203a191df6b26adcccb9.exe File created C:\Windows\SysWOW64\macromd\two teenie boppers learning to eat pussy.mpg.pif e001b8ee7e1942eec54ab1d3db619c4e9ffc1205efbe203a191df6b26adcccb9.exe File created C:\Windows\SysWOW64\macromd\chubby girl fucked from all angles xxx.exe e001b8ee7e1942eec54ab1d3db619c4e9ffc1205efbe203a191df6b26adcccb9.exe File created C:\Windows\SysWOW64\macromd\babe with peach shape pussy that needs it bitten.mpg.pif e001b8ee7e1942eec54ab1d3db619c4e9ffc1205efbe203a191df6b26adcccb9.exe