Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
105s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
09/10/2022, 21:00
Static task
static1
Behavioral task
behavioral1
Sample
9d1556c52c12db66c7457d9c6d9ee5536297724e76f381a9118af60fd8371166.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9d1556c52c12db66c7457d9c6d9ee5536297724e76f381a9118af60fd8371166.exe
Resource
win10v2004-20220812-en
General
-
Target
9d1556c52c12db66c7457d9c6d9ee5536297724e76f381a9118af60fd8371166.exe
-
Size
3.1MB
-
MD5
5ad1f4ebca320c82aa9a86dc09c2de59
-
SHA1
6d24ba75a9112a5ba47580dc1870f5ba37dbd2d9
-
SHA256
9d1556c52c12db66c7457d9c6d9ee5536297724e76f381a9118af60fd8371166
-
SHA512
1ce97224dc3a5070fed9e2fcf485233a662286fdc555613879c57bee91b457ff1611397b1cfdc51b7f1960ff7687d6d1bce4736e8c11c93279078a833114c327
-
SSDEEP
49152:SoID0vRO4WwvH3lQ0mjSxDf/Xm8CCVTVEsJFToRkkl6G73SRHu83V:x3vzHH3lQ0mOxrxpEsJFToq23uHu4
Malware Config
Signatures
-
Modifies Control Panel 8 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-2629973501-4017243118-3254762364-1000\Control Panel\International\iTimePrefix = "0" 9d1556c52c12db66c7457d9c6d9ee5536297724e76f381a9118af60fd8371166.exe Set value (str) \REGISTRY\USER\S-1-5-21-2629973501-4017243118-3254762364-1000\Control Panel\International\sTime = ":" 9d1556c52c12db66c7457d9c6d9ee5536297724e76f381a9118af60fd8371166.exe Set value (str) \REGISTRY\USER\S-1-5-21-2629973501-4017243118-3254762364-1000\Control Panel\International\sShortDate = "yyyy-MM-dd" 9d1556c52c12db66c7457d9c6d9ee5536297724e76f381a9118af60fd8371166.exe Set value (str) \REGISTRY\USER\S-1-5-21-2629973501-4017243118-3254762364-1000\Control Panel\International\iDate = "2" 9d1556c52c12db66c7457d9c6d9ee5536297724e76f381a9118af60fd8371166.exe Set value (str) \REGISTRY\USER\S-1-5-21-2629973501-4017243118-3254762364-1000\Control Panel\International\sDate = "-" 9d1556c52c12db66c7457d9c6d9ee5536297724e76f381a9118af60fd8371166.exe Set value (str) \REGISTRY\USER\S-1-5-21-2629973501-4017243118-3254762364-1000\Control Panel\International\sTimeFormat = "HH:mm:ss" 9d1556c52c12db66c7457d9c6d9ee5536297724e76f381a9118af60fd8371166.exe Set value (str) \REGISTRY\USER\S-1-5-21-2629973501-4017243118-3254762364-1000\Control Panel\International\iTime = "1" 9d1556c52c12db66c7457d9c6d9ee5536297724e76f381a9118af60fd8371166.exe Set value (str) \REGISTRY\USER\S-1-5-21-2629973501-4017243118-3254762364-1000\Control Panel\International\iTLZero = "1" 9d1556c52c12db66c7457d9c6d9ee5536297724e76f381a9118af60fd8371166.exe