Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
165s -
max time network
175s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
03/10/2022, 00:03
Static task
static1
Behavioral task
behavioral1
Sample
05c22a28262ccf6c3d89f02d572b64f6bbe0615d21cac770f8eacb52a1fb61c8.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
05c22a28262ccf6c3d89f02d572b64f6bbe0615d21cac770f8eacb52a1fb61c8.exe
Resource
win10v2004-20220812-en
General
-
Target
05c22a28262ccf6c3d89f02d572b64f6bbe0615d21cac770f8eacb52a1fb61c8.exe
-
Size
61KB
-
MD5
6e0976cb2df3a451ed0bd0dd14b3a154
-
SHA1
d3e776cbec58721007c00626d301ca34974c61c5
-
SHA256
05c22a28262ccf6c3d89f02d572b64f6bbe0615d21cac770f8eacb52a1fb61c8
-
SHA512
80089f27a01e698a439a1f90a7e1d06f4331a5bbf2bb4c697dcb6ad26ab096099b7dd66131f6a0d10d01b409e1f3baaa38be645c85b6717bb8105550176adda9
-
SSDEEP
1536:Z9r9r9r9rs4HQrQo7i3g0amnBoUDJqlWv4ZhobT4yURn3JnsLXcVK:ZZZZZs77sbnBoUDJqlRCI2F
Malware Config
Signatures
-
Modifies registry class 4 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{97BE83EE-AF26-F17A-2AD4-EDF946D01A87}\LocalServer32 05c22a28262ccf6c3d89f02d572b64f6bbe0615d21cac770f8eacb52a1fb61c8.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{97BE83EE-AF26-F17A-2AD4-EDF946D01A87}\LocalServer32\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\05c22a28262ccf6c3d89f02d572b64f6bbe0615d21cac770f8eacb52a1fb61c8.exe" 05c22a28262ccf6c3d89f02d572b64f6bbe0615d21cac770f8eacb52a1fb61c8.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{97BE83EE-AF26-F17A-2AD4-EDF946D01A87} 05c22a28262ccf6c3d89f02d572b64f6bbe0615d21cac770f8eacb52a1fb61c8.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{97BE83EE-AF26-F17A-2AD4-EDF946D01A87}\ = "clslhwcrvrlqsslb" 05c22a28262ccf6c3d89f02d572b64f6bbe0615d21cac770f8eacb52a1fb61c8.exe