Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
150s -
max time network
129s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
17/10/2022, 09:30
Static task
static1
Behavioral task
behavioral1
Sample
36e1e818f0c3f786c280c5397d61fc97cca8daa2d5e5ecb3f993d294bdeea371.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
36e1e818f0c3f786c280c5397d61fc97cca8daa2d5e5ecb3f993d294bdeea371.exe
Resource
win10v2004-20220812-en
General
-
Target
36e1e818f0c3f786c280c5397d61fc97cca8daa2d5e5ecb3f993d294bdeea371.exe
-
Size
176KB
-
MD5
622d01b859b2a5d03ee350605f5d566c
-
SHA1
64d2782a4ab85508d5b442f08d1b1d19e059d368
-
SHA256
36e1e818f0c3f786c280c5397d61fc97cca8daa2d5e5ecb3f993d294bdeea371
-
SHA512
2e9a2d965ec232e76ca84308c60bb8d6f6f42aad6c7b9daad1cbfdb12a86c91f7f9315006eaac4c7be2cf574659db75747fc0fc367cbe45fbf6b747af489830f
-
SSDEEP
3072:6e7WpMNca3rytOkWpXfnYRl2l/9HSFHzJ0lBL:RqKB+tOkWKR0iJ0X
Malware Config
Signatures
-
Drops file in Program Files directory 64 IoCs
description ioc Process File created C:\Program Files\Google\Chrome\Application\89.0.4389.114\default_apps\youtube.crx.tmp 36e1e818f0c3f786c280c5397d61fc97cca8daa2d5e5ecb3f993d294bdeea371.exe File created C:\Program Files\Microsoft Office\root\Licenses16\Excel2019R_OEM_Perp-ul-phn.xrm-ms.tmp 36e1e818f0c3f786c280c5397d61fc97cca8daa2d5e5ecb3f993d294bdeea371.exe File created C:\Program Files\Common Files\microsoft shared\ink\it-IT\rtscom.dll.mui.tmp 36e1e818f0c3f786c280c5397d61fc97cca8daa2d5e5ecb3f993d294bdeea371.exe File created C:\Program Files\Google\Chrome\Application\89.0.4389.114\default_apps\gmail.crx.tmp 36e1e818f0c3f786c280c5397d61fc97cca8daa2d5e5ecb3f993d294bdeea371.exe File created C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_SubTrial5-ul-oob.xrm-ms.tmp 36e1e818f0c3f786c280c5397d61fc97cca8daa2d5e5ecb3f993d294bdeea371.exe File created C:\Program Files\Microsoft Office\root\Licenses16\ProfessionalR_Grace-ppd.xrm-ms.tmp 36e1e818f0c3f786c280c5397d61fc97cca8daa2d5e5ecb3f993d294bdeea371.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.equinox.p2.rcp.feature_1.2.0.v20140523-0116\META-INF\MANIFEST.MF.tmp 36e1e818f0c3f786c280c5397d61fc97cca8daa2d5e5ecb3f993d294bdeea371.exe File created C:\Program Files\Microsoft Office\root\Licenses16\HomeStudentR_OEM_Perp-pl.xrm-ms.tmp 36e1e818f0c3f786c280c5397d61fc97cca8daa2d5e5ecb3f993d294bdeea371.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-netbeans-modules-sendopts.xml.tmp 36e1e818f0c3f786c280c5397d61fc97cca8daa2d5e5ecb3f993d294bdeea371.exe File created C:\Program Files\Common Files\microsoft shared\ink\Alphabet.xml.tmp 36e1e818f0c3f786c280c5397d61fc97cca8daa2d5e5ecb3f993d294bdeea371.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-progress-ui_zh_CN.jar.tmp 36e1e818f0c3f786c280c5397d61fc97cca8daa2d5e5ecb3f993d294bdeea371.exe File created C:\Program Files\Microsoft Office\root\Licenses16\ProjectStdVL_MAK-pl.xrm-ms.tmp 36e1e818f0c3f786c280c5397d61fc97cca8daa2d5e5ecb3f993d294bdeea371.exe File created C:\Program Files\Common Files\microsoft shared\ink\en-US\micaut.dll.mui.tmp 36e1e818f0c3f786c280c5397d61fc97cca8daa2d5e5ecb3f993d294bdeea371.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\preface.htm.tmp 36e1e818f0c3f786c280c5397d61fc97cca8daa2d5e5ecb3f993d294bdeea371.exe File created C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessPipcDemoR_BypassTrial365-ul-oob.xrm-ms.tmp 36e1e818f0c3f786c280c5397d61fc97cca8daa2d5e5ecb3f993d294bdeea371.exe File created C:\Program Files\Microsoft Office\root\Licenses16\ProjectProR_Trial-ppd.xrm-ms.tmp 36e1e818f0c3f786c280c5397d61fc97cca8daa2d5e5ecb3f993d294bdeea371.exe File created C:\Program Files\Microsoft Office\root\Licenses16\OneNoteVL_KMS_Client-ul-oob.xrm-ms.tmp 36e1e818f0c3f786c280c5397d61fc97cca8daa2d5e5ecb3f993d294bdeea371.exe File created C:\Program Files\Microsoft Office\root\Licenses16\PowerPoint2019R_Grace-ppd.xrm-ms.tmp 36e1e818f0c3f786c280c5397d61fc97cca8daa2d5e5ecb3f993d294bdeea371.exe File created C:\Program Files\Java\jdk1.8.0_66\jre\bin\jp2iexp.dll.tmp 36e1e818f0c3f786c280c5397d61fc97cca8daa2d5e5ecb3f993d294bdeea371.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.rcp.application.zh_CN_5.5.0.165303.jar.tmp 36e1e818f0c3f786c280c5397d61fc97cca8daa2d5e5ecb3f993d294bdeea371.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-openide-loaders.xml.tmp 36e1e818f0c3f786c280c5397d61fc97cca8daa2d5e5ecb3f993d294bdeea371.exe File created C:\Program Files\Microsoft Office\root\Licenses16\MondoR_Retail-ul-phn.xrm-ms.tmp 36e1e818f0c3f786c280c5397d61fc97cca8daa2d5e5ecb3f993d294bdeea371.exe File created C:\Program Files\Microsoft Office\root\Licenses16\ProfessionalR_OEM_Perp-ul-phn.xrm-ms.tmp 36e1e818f0c3f786c280c5397d61fc97cca8daa2d5e5ecb3f993d294bdeea371.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.core.commands.nl_ja_4.4.0.v20140623020002.jar.tmp 36e1e818f0c3f786c280c5397d61fc97cca8daa2d5e5ecb3f993d294bdeea371.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.core.commands_0.10.2.v20140424-2344.jar.tmp 36e1e818f0c3f786c280c5397d61fc97cca8daa2d5e5ecb3f993d294bdeea371.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.docs.ja_5.5.0.165303.jar.tmp 36e1e818f0c3f786c280c5397d61fc97cca8daa2d5e5ecb3f993d294bdeea371.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.w3c.dom.smil_1.0.0.v200806040011.jar.tmp 36e1e818f0c3f786c280c5397d61fc97cca8daa2d5e5ecb3f993d294bdeea371.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\ModuleAutoDeps\org-netbeans-modules-options-api.xml.tmp 36e1e818f0c3f786c280c5397d61fc97cca8daa2d5e5ecb3f993d294bdeea371.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\lib\locale\org-openide-util_ja.jar.tmp 36e1e818f0c3f786c280c5397d61fc97cca8daa2d5e5ecb3f993d294bdeea371.exe File created C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_Subscription3-ppd.xrm-ms.tmp 36e1e818f0c3f786c280c5397d61fc97cca8daa2d5e5ecb3f993d294bdeea371.exe File created C:\Program Files\Microsoft Office\root\Licenses16\OutlookVL_MAK-pl.xrm-ms.tmp 36e1e818f0c3f786c280c5397d61fc97cca8daa2d5e5ecb3f993d294bdeea371.exe File created C:\Program Files\Common Files\System\msadc\ja-JP\msaddsr.dll.mui.tmp 36e1e818f0c3f786c280c5397d61fc97cca8daa2d5e5ecb3f993d294bdeea371.exe File created C:\Program Files\Java\jdk1.8.0_66\jre\bin\jp2ssv.dll.tmp 36e1e818f0c3f786c280c5397d61fc97cca8daa2d5e5ecb3f993d294bdeea371.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.core.di_1.4.0.v20140414-1837.jar.tmp 36e1e818f0c3f786c280c5397d61fc97cca8daa2d5e5ecb3f993d294bdeea371.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.ui.workbench.addons.swt.nl_zh_4.4.0.v20140623020002.jar.tmp 36e1e818f0c3f786c280c5397d61fc97cca8daa2d5e5ecb3f993d294bdeea371.exe File created C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusR_Subscription3-pl.xrm-ms.tmp 36e1e818f0c3f786c280c5397d61fc97cca8daa2d5e5ecb3f993d294bdeea371.exe File created C:\Program Files\Microsoft Office\root\Licenses16\Professional2019R_PrepidBypass-ul-oob.xrm-ms.tmp 36e1e818f0c3f786c280c5397d61fc97cca8daa2d5e5ecb3f993d294bdeea371.exe File created C:\Program Files\Common Files\System\Ole DB\ja-JP\msdasqlr.dll.mui.tmp 36e1e818f0c3f786c280c5397d61fc97cca8daa2d5e5ecb3f993d294bdeea371.exe File created C:\Program Files\Java\jdk1.8.0_66\jre\lib\cmm\CIEXYZ.pf.tmp 36e1e818f0c3f786c280c5397d61fc97cca8daa2d5e5ecb3f993d294bdeea371.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\schema\com.jrockit.mc.rjmx.service.exsd.tmp 36e1e818f0c3f786c280c5397d61fc97cca8daa2d5e5ecb3f993d294bdeea371.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.ui.ja_5.5.0.165303.jar.tmp 36e1e818f0c3f786c280c5397d61fc97cca8daa2d5e5ecb3f993d294bdeea371.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-netbeans-modules-keyring-impl.xml.tmp 36e1e818f0c3f786c280c5397d61fc97cca8daa2d5e5ecb3f993d294bdeea371.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-jvmstat_zh_CN.jar.tmp 36e1e818f0c3f786c280c5397d61fc97cca8daa2d5e5ecb3f993d294bdeea371.exe File created C:\Program Files\Java\jre1.8.0_66\bin\zip.dll.tmp 36e1e818f0c3f786c280c5397d61fc97cca8daa2d5e5ecb3f993d294bdeea371.exe File created C:\Program Files\Microsoft Office\root\Licenses16\ExcelR_OEM_Perp-ppd.xrm-ms.tmp 36e1e818f0c3f786c280c5397d61fc97cca8daa2d5e5ecb3f993d294bdeea371.exe File created C:\Program Files\Common Files\System\msadc\msdarem.dll.tmp 36e1e818f0c3f786c280c5397d61fc97cca8daa2d5e5ecb3f993d294bdeea371.exe File created C:\Program Files\Java\jdk1.8.0_66\jre\bin\glass.dll.tmp 36e1e818f0c3f786c280c5397d61fc97cca8daa2d5e5ecb3f993d294bdeea371.exe File created C:\Program Files\Google\Chrome\Application\89.0.4389.114\chrome.dll.sig.tmp 36e1e818f0c3f786c280c5397d61fc97cca8daa2d5e5ecb3f993d294bdeea371.exe File created C:\Program Files\Java\jdk1.8.0_66\jre\bin\keytool.exe.tmp 36e1e818f0c3f786c280c5397d61fc97cca8daa2d5e5ecb3f993d294bdeea371.exe File created C:\Program Files\Java\jdk1.8.0_66\jre\lib\deploy\messages_zh_TW.properties.tmp 36e1e818f0c3f786c280c5397d61fc97cca8daa2d5e5ecb3f993d294bdeea371.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\org-netbeans-modules-keyring-impl.jar.tmp 36e1e818f0c3f786c280c5397d61fc97cca8daa2d5e5ecb3f993d294bdeea371.exe File created C:\Program Files\Microsoft Office\root\Licenses16\MondoR_Retail-ppd.xrm-ms.tmp 36e1e818f0c3f786c280c5397d61fc97cca8daa2d5e5ecb3f993d294bdeea371.exe File created C:\Program Files\Microsoft Office\root\Licenses16\PersonalR_Retail-ul-oob.xrm-ms.tmp 36e1e818f0c3f786c280c5397d61fc97cca8daa2d5e5ecb3f993d294bdeea371.exe File created C:\Program Files\7-Zip\Lang\fa.txt.tmp 36e1e818f0c3f786c280c5397d61fc97cca8daa2d5e5ecb3f993d294bdeea371.exe File created C:\Program Files\Common Files\System\Ole DB\it-IT\oledb32r.dll.mui.tmp 36e1e818f0c3f786c280c5397d61fc97cca8daa2d5e5ecb3f993d294bdeea371.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\ModuleAutoDeps\org-netbeans-modules-queries.xml.tmp 36e1e818f0c3f786c280c5397d61fc97cca8daa2d5e5ecb3f993d294bdeea371.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\profiler\lib\jfluid-server.jar.tmp 36e1e818f0c3f786c280c5397d61fc97cca8daa2d5e5ecb3f993d294bdeea371.exe File created C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusR_SubTrial3-pl.xrm-ms.tmp 36e1e818f0c3f786c280c5397d61fc97cca8daa2d5e5ecb3f993d294bdeea371.exe File created C:\Program Files\Microsoft Office\root\Licenses16\OutlookR_Retail-ul-phn.xrm-ms.tmp 36e1e818f0c3f786c280c5397d61fc97cca8daa2d5e5ecb3f993d294bdeea371.exe File created C:\Program Files\Microsoft Office\root\Licenses16\ProjectPro2019R_Retail-ppd.xrm-ms.tmp 36e1e818f0c3f786c280c5397d61fc97cca8daa2d5e5ecb3f993d294bdeea371.exe File created C:\Program Files\Common Files\microsoft shared\VSTO\vstoee90.tlb.tmp 36e1e818f0c3f786c280c5397d61fc97cca8daa2d5e5ecb3f993d294bdeea371.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.metadata.repository.nl_ja_4.4.0.v20140623020002.jar.tmp 36e1e818f0c3f786c280c5397d61fc97cca8daa2d5e5ecb3f993d294bdeea371.exe File created C:\Program Files\Internet Explorer\en-US\hmmapi.dll.mui.tmp 36e1e818f0c3f786c280c5397d61fc97cca8daa2d5e5ecb3f993d294bdeea371.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-jvm_zh_CN.jar.tmp 36e1e818f0c3f786c280c5397d61fc97cca8daa2d5e5ecb3f993d294bdeea371.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
177KB
MD58c74cc1602581dd154f243ff0ab571f4
SHA16cacd5ff3b6788eb32527fb3500ee69aa65ed764
SHA256d69c7f6fdd90a8d8f1b53dc2bfc98f77e475b0fdfb7c3ce8c4647025e4c45890
SHA512a852df62e57a294fa99ff329a10c89c35cd9074dffc46d34408e840a2a46c232d8480558e58eccbe6c36c0585323e54eb7b1817d536d8171c78e07b9545293bf