Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
33s -
max time network
41s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
19/10/2022, 19:04
Behavioral task
behavioral1
Sample
745538d83dbb454575bbb19568351342773a0769ac7eb66d7c8e516336cc9f5c.exe
Resource
win7-20220812-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
745538d83dbb454575bbb19568351342773a0769ac7eb66d7c8e516336cc9f5c.exe
Resource
win10v2004-20220901-en
windows10-2004-x64
3 signatures
150 seconds
General
-
Target
745538d83dbb454575bbb19568351342773a0769ac7eb66d7c8e516336cc9f5c.exe
-
Size
87KB
-
MD5
a13897b554a83b7685a81d4613114300
-
SHA1
519a7f1c69d98a858e988308d880d514f3278ab1
-
SHA256
745538d83dbb454575bbb19568351342773a0769ac7eb66d7c8e516336cc9f5c
-
SHA512
f473f7d8b4527a9d1d3d7b8b6d713599f2cdefc3d5cc76f83c7ad44e014ff68318b22be3f450747e9f7f28a4ccc55f077e899d5b2b2953aa60e8c820518f4d46
-
SSDEEP
1536:5lrsicagdzn8K2ariPOcjk+XQuPVN72NMSBkagGqm6FCwmc:5JjcF8KfCOcjk+guPVjSqP7BFP
Score
8/10
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/1452-54-0x0000000000400000-0x0000000000467000-memory.dmp upx behavioral1/memory/1452-55-0x0000000000400000-0x0000000000467000-memory.dmp upx -
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\winxcfg.exe = "C:\\Windows\\system32\\winxcfg.exe" 745538d83dbb454575bbb19568351342773a0769ac7eb66d7c8e516336cc9f5c.exe -
Drops file in System32 directory 33 IoCs
description ioc Process File created C:\Windows\SysWOW64\macromd\password stealer.exe 745538d83dbb454575bbb19568351342773a0769ac7eb66d7c8e516336cc9f5c.exe File created C:\Windows\SysWOW64\macromd\MSN.exe 745538d83dbb454575bbb19568351342773a0769ac7eb66d7c8e516336cc9f5c.exe File created C:\Windows\SysWOW64\macromd\Free Porn.exe 745538d83dbb454575bbb19568351342773a0769ac7eb66d7c8e516336cc9f5c.exe File created C:\Windows\SysWOW64\macromd\babe with dick stuck between her ass cheeks.mpg.pif 745538d83dbb454575bbb19568351342773a0769ac7eb66d7c8e516336cc9f5c.exe File created C:\Windows\SysWOW64\macromd\two busty sluts fucked in bathroom.mpg.pif 745538d83dbb454575bbb19568351342773a0769ac7eb66d7c8e516336cc9f5c.exe File created C:\Windows\SysWOW64\macromd\divx pro.exe 745538d83dbb454575bbb19568351342773a0769ac7eb66d7c8e516336cc9f5c.exe File created C:\Windows\SysWOW64\macromd\invisible IP.exe 745538d83dbb454575bbb19568351342773a0769ac7eb66d7c8e516336cc9f5c.exe File created C:\Windows\SysWOW64\macromd\AOL.exe 745538d83dbb454575bbb19568351342773a0769ac7eb66d7c8e516336cc9f5c.exe File created C:\Windows\SysWOW64\macromd\illegal preteen porn anal fisting.mpg.pif 745538d83dbb454575bbb19568351342773a0769ac7eb66d7c8e516336cc9f5c.exe File created C:\Windows\SysWOW64\macromd\extremely fine hoine with incredible sweet twat.mpg.pif 745538d83dbb454575bbb19568351342773a0769ac7eb66d7c8e516336cc9f5c.exe File created C:\Windows\SysWOW64\macromd\hot babe showing her pussy and wanting a stiff cock.mpg.pif 745538d83dbb454575bbb19568351342773a0769ac7eb66d7c8e516336cc9f5c.exe File created C:\Windows\SysWOW64\macromd\fine babe spreading extremely hot ass and furball.mpg.pif 745538d83dbb454575bbb19568351342773a0769ac7eb66d7c8e516336cc9f5c.exe File created C:\Windows\SysWOW64\macromd\hot busty amateur babe stripping and spreading.mpg.pif 745538d83dbb454575bbb19568351342773a0769ac7eb66d7c8e516336cc9f5c.exe File created C:\Windows\SysWOW64\macromd\chunky broad with a hairy well used ass.mpg.pif 745538d83dbb454575bbb19568351342773a0769ac7eb66d7c8e516336cc9f5c.exe File created C:\Windows\SysWOW64\macromd\slutty japanese babe giving blowjob.mpg.pif 745538d83dbb454575bbb19568351342773a0769ac7eb66d7c8e516336cc9f5c.exe File created C:\Windows\SysWOW64\macromd\teen hottie geting buttfucked.mpg.pif 745538d83dbb454575bbb19568351342773a0769ac7eb66d7c8e516336cc9f5c.exe File created C:\Windows\SysWOW64\macromd\twink stroking his butt plugger.mpg.pif 745538d83dbb454575bbb19568351342773a0769ac7eb66d7c8e516336cc9f5c.exe File created C:\Windows\SysWOW64\winxcfg.exe 745538d83dbb454575bbb19568351342773a0769ac7eb66d7c8e516336cc9f5c.exe File created C:\Windows\SysWOW64\macromd\uncle fred spanking his young nieces little ass.mpg.pif 745538d83dbb454575bbb19568351342773a0769ac7eb66d7c8e516336cc9f5c.exe File created C:\Windows\SysWOW64\macromd\babe leading pussy-whipped stud around by her cunt.mpg.pif 745538d83dbb454575bbb19568351342773a0769ac7eb66d7c8e516336cc9f5c.exe File created C:\Windows\SysWOW64\macromd\uptown girl with great ass that should be illegal.mpg.pif 745538d83dbb454575bbb19568351342773a0769ac7eb66d7c8e516336cc9f5c.exe File created C:\Windows\SysWOW64\macromd\wild stud eating and drilling small pussy freek.mpg.pif 745538d83dbb454575bbb19568351342773a0769ac7eb66d7c8e516336cc9f5c.exe File created C:\Windows\SysWOW64\macromd\sylvia lauren showing her assets.mpg.pif 745538d83dbb454575bbb19568351342773a0769ac7eb66d7c8e516336cc9f5c.exe File created C:\Windows\SysWOW64\macromd\Counter Strike CD Keygen.exe 745538d83dbb454575bbb19568351342773a0769ac7eb66d7c8e516336cc9f5c.exe File created C:\Windows\SysWOW64\macromd\leggy babe posing in pink panties.mpg.pif 745538d83dbb454575bbb19568351342773a0769ac7eb66d7c8e516336cc9f5c.exe File created C:\Windows\SysWOW64\macromd\cum hungry teen in action.mpg.pif 745538d83dbb454575bbb19568351342773a0769ac7eb66d7c8e516336cc9f5c.exe File created C:\Windows\SysWOW64\macromd\nasty brunette getting hard jolting.mpg.pif 745538d83dbb454575bbb19568351342773a0769ac7eb66d7c8e516336cc9f5c.exe File created C:\Windows\SysWOW64\macromd\hardcored blonde mature.mpg.pif 745538d83dbb454575bbb19568351342773a0769ac7eb66d7c8e516336cc9f5c.exe File created C:\Windows\SysWOW64\macromd\hot japanese office sex.mpg.pif 745538d83dbb454575bbb19568351342773a0769ac7eb66d7c8e516336cc9f5c.exe File created C:\Windows\SysWOW64\macromd\violent preteen gang bang illegal.mpg.exe 745538d83dbb454575bbb19568351342773a0769ac7eb66d7c8e516336cc9f5c.exe File created C:\Windows\SysWOW64\macromd\honie with a ka-boom hot ass and delicious cunt.mpg.pif 745538d83dbb454575bbb19568351342773a0769ac7eb66d7c8e516336cc9f5c.exe File created C:\Windows\SysWOW64\macromd\mature show older pussy and happy to do it.mpg.pif 745538d83dbb454575bbb19568351342773a0769ac7eb66d7c8e516336cc9f5c.exe File created C:\Windows\SysWOW64\macromd\hot blonde fucking and sucking cum.mpg.pif 745538d83dbb454575bbb19568351342773a0769ac7eb66d7c8e516336cc9f5c.exe