Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
30s -
max time network
46s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
19/10/2022, 19:03
Behavioral task
behavioral1
Sample
7b9bd6385deea956b215105c7c504000f44e4c4a5ce3fa1b1057ab87454dfc85.exe
Resource
win7-20220812-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
7b9bd6385deea956b215105c7c504000f44e4c4a5ce3fa1b1057ab87454dfc85.exe
Resource
win10v2004-20220812-en
windows10-2004-x64
3 signatures
150 seconds
General
-
Target
7b9bd6385deea956b215105c7c504000f44e4c4a5ce3fa1b1057ab87454dfc85.exe
-
Size
86KB
-
MD5
a0b5a6b1164f3dd05cee993ebc43dd90
-
SHA1
ffd0407a257f0c3c94dc57bcd8ba00a6295c9a4b
-
SHA256
7b9bd6385deea956b215105c7c504000f44e4c4a5ce3fa1b1057ab87454dfc85
-
SHA512
360caa72186ee2656b178ec28a654c73c423ad59361a36c74ce601642cbc7a105e321ae087926e124d3ecedccc66144196097cd61e448490ad22a194e5f57da3
-
SSDEEP
1536:5lrsicagdzn8K2ariPOcjk+XQuPVN72NMSEUmEAGmw4Xfpqadveommx+:5JjcF8KfCOcjk+guPVjSAEAGmw4Xfpqf
Score
8/10
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/1788-54-0x0000000000400000-0x0000000000467000-memory.dmp upx behavioral1/memory/1788-55-0x0000000000400000-0x0000000000467000-memory.dmp upx -
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\winxcfg.exe = "C:\\Windows\\system32\\winxcfg.exe" 7b9bd6385deea956b215105c7c504000f44e4c4a5ce3fa1b1057ab87454dfc85.exe -
Drops file in System32 directory 33 IoCs
description ioc Process File created C:\Windows\SysWOW64\macromd\brutal preteen porn xxx.exe 7b9bd6385deea956b215105c7c504000f44e4c4a5ce3fa1b1057ab87454dfc85.exe File created C:\Windows\SysWOW64\macromd\two kinky old lezbos snapping the whip.mpg.pif 7b9bd6385deea956b215105c7c504000f44e4c4a5ce3fa1b1057ab87454dfc85.exe File created C:\Windows\SysWOW64\macromd\hot shemale stripping bare.mpg.pif 7b9bd6385deea956b215105c7c504000f44e4c4a5ce3fa1b1057ab87454dfc85.exe File created C:\Windows\SysWOW64\macromd\amateur slut with a huge gun.mpg.pif 7b9bd6385deea956b215105c7c504000f44e4c4a5ce3fa1b1057ab87454dfc85.exe File created C:\Windows\SysWOW64\macromd\blonde babe handfucking herself.mpg.pif 7b9bd6385deea956b215105c7c504000f44e4c4a5ce3fa1b1057ab87454dfc85.exe File created C:\Windows\SysWOW64\macromd\babes getting big cocks off with lips.mpg.pif 7b9bd6385deea956b215105c7c504000f44e4c4a5ce3fa1b1057ab87454dfc85.exe File created C:\Windows\SysWOW64\macromd\sexy amatures sucking whole bag.mpg.pif 7b9bd6385deea956b215105c7c504000f44e4c4a5ce3fa1b1057ab87454dfc85.exe File created C:\Windows\SysWOW64\macromd\asian girls stuffed mouth shots.mpg.pif 7b9bd6385deea956b215105c7c504000f44e4c4a5ce3fa1b1057ab87454dfc85.exe File created C:\Windows\SysWOW64\macromd\pornstar aria giovanni .mpg.pif 7b9bd6385deea956b215105c7c504000f44e4c4a5ce3fa1b1057ab87454dfc85.exe File created C:\Windows\SysWOW64\macromd\preteen snuff sex rape with a stick hardcore.mpg.pif 7b9bd6385deea956b215105c7c504000f44e4c4a5ce3fa1b1057ab87454dfc85.exe File created C:\Windows\SysWOW64\macromd\divx pro.exe 7b9bd6385deea956b215105c7c504000f44e4c4a5ce3fa1b1057ab87454dfc85.exe File created C:\Windows\SysWOW64\macromd\hardcored blonde mature.mpg.pif 7b9bd6385deea956b215105c7c504000f44e4c4a5ce3fa1b1057ab87454dfc85.exe File created C:\Windows\SysWOW64\macromd\hot blonde fucking and sucking cum.mpg.pif 7b9bd6385deea956b215105c7c504000f44e4c4a5ce3fa1b1057ab87454dfc85.exe File created C:\Windows\SysWOW64\macromd\DivX pro key generator.exe 7b9bd6385deea956b215105c7c504000f44e4c4a5ce3fa1b1057ab87454dfc85.exe File created C:\Windows\SysWOW64\macromd\teen with her legs wide and fingers in her wet cunt.mpg.pif 7b9bd6385deea956b215105c7c504000f44e4c4a5ce3fa1b1057ab87454dfc85.exe File created C:\Windows\SysWOW64\macromd\some naughty toons fantasy.mpg.pif 7b9bd6385deea956b215105c7c504000f44e4c4a5ce3fa1b1057ab87454dfc85.exe File created C:\Windows\SysWOW64\macromd\illegal porno - 15 year old raped by two men on boat.mpg.pif 7b9bd6385deea956b215105c7c504000f44e4c4a5ce3fa1b1057ab87454dfc85.exe File created C:\Windows\SysWOW64\macromd\honie with a ka-boom hot ass and delicious cunt.mpg.pif 7b9bd6385deea956b215105c7c504000f44e4c4a5ce3fa1b1057ab87454dfc85.exe File created C:\Windows\SysWOW64\macromd\both holes fucked by a massive fucking machin.mpg.pif 7b9bd6385deea956b215105c7c504000f44e4c4a5ce3fa1b1057ab87454dfc85.exe File created C:\Windows\SysWOW64\macromd\hot anal sex for the first time ever.mpg.pif 7b9bd6385deea956b215105c7c504000f44e4c4a5ce3fa1b1057ab87454dfc85.exe File created C:\Windows\SysWOW64\macromd\kinky banana in pussy.mpg.pif 7b9bd6385deea956b215105c7c504000f44e4c4a5ce3fa1b1057ab87454dfc85.exe File created C:\Windows\SysWOW64\macromd\aol password cracker.exe 7b9bd6385deea956b215105c7c504000f44e4c4a5ce3fa1b1057ab87454dfc85.exe File created C:\Windows\SysWOW64\macromd\invisible IP.exe 7b9bd6385deea956b215105c7c504000f44e4c4a5ce3fa1b1057ab87454dfc85.exe File created C:\Windows\SysWOW64\macromd\little brown cup-cake with plump boobs and sweet beaver.mpg.pif 7b9bd6385deea956b215105c7c504000f44e4c4a5ce3fa1b1057ab87454dfc85.exe File created C:\Windows\SysWOW64\macromd\action with three chicks getting it on with a guy.mpg.pif 7b9bd6385deea956b215105c7c504000f44e4c4a5ce3fa1b1057ab87454dfc85.exe File created C:\Windows\SysWOW64\macromd\teen spreading in the kitchen.mpg.pif 7b9bd6385deea956b215105c7c504000f44e4c4a5ce3fa1b1057ab87454dfc85.exe File created C:\Windows\SysWOW64\winxcfg.exe 7b9bd6385deea956b215105c7c504000f44e4c4a5ce3fa1b1057ab87454dfc85.exe File created C:\Windows\SysWOW64\macromd\illegal preteen porn anal fisting.mpg.pif 7b9bd6385deea956b215105c7c504000f44e4c4a5ce3fa1b1057ab87454dfc85.exe File created C:\Windows\SysWOW64\macromd\nurse in pink showing her healthy bone slot.mpg.pif 7b9bd6385deea956b215105c7c504000f44e4c4a5ce3fa1b1057ab87454dfc85.exe File created C:\Windows\SysWOW64\macromd\nasty teen posing in panties.mpg.pif 7b9bd6385deea956b215105c7c504000f44e4c4a5ce3fa1b1057ab87454dfc85.exe File created C:\Windows\SysWOW64\macromd\genuine indian slut posing.mpg.pif 7b9bd6385deea956b215105c7c504000f44e4c4a5ce3fa1b1057ab87454dfc85.exe File created C:\Windows\SysWOW64\macromd\busty slut stripping in bed.mpg.pif 7b9bd6385deea956b215105c7c504000f44e4c4a5ce3fa1b1057ab87454dfc85.exe File created C:\Windows\SysWOW64\macromd\nasty naked hentai hoes teasing.mpg.pif 7b9bd6385deea956b215105c7c504000f44e4c4a5ce3fa1b1057ab87454dfc85.exe