Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
91s -
max time network
139s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
19/10/2022, 19:09
Behavioral task
behavioral1
Sample
1b8a7aa9d6ad2bf4f3e063bd4be538b57db98466b1132a08dda1bd2e92d36aef.exe
Resource
win7-20220812-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
1b8a7aa9d6ad2bf4f3e063bd4be538b57db98466b1132a08dda1bd2e92d36aef.exe
Resource
win10v2004-20220901-en
windows10-2004-x64
3 signatures
150 seconds
General
-
Target
1b8a7aa9d6ad2bf4f3e063bd4be538b57db98466b1132a08dda1bd2e92d36aef.exe
-
Size
70KB
-
MD5
a1a8c79727c1fc3c35068316c51d23d0
-
SHA1
652d82c3a88d876e50e3f1bca4e2850224a6a7cf
-
SHA256
1b8a7aa9d6ad2bf4f3e063bd4be538b57db98466b1132a08dda1bd2e92d36aef
-
SHA512
de9900ca1c4c3446ad2cb75f7e951478c8b77bb4ad00ec26a438204ae5f6526a39effa3ad3e5e1f0a2d8ea20b5190185303c5602180933538a1e1011172cd512
-
SSDEEP
1536:5lrsicagdzn8K2ariPOcjk+XQuPVN72NMSQj3q:5JjcF8KfCOcjk+guPVjSQja
Score
8/10
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/2300-132-0x0000000000400000-0x0000000000467000-memory.dmp upx behavioral2/memory/2300-133-0x0000000000400000-0x0000000000467000-memory.dmp upx -
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\winxcfg.exe = "C:\\Windows\\system32\\winxcfg.exe" 1b8a7aa9d6ad2bf4f3e063bd4be538b57db98466b1132a08dda1bd2e92d36aef.exe -
Drops file in System32 directory 33 IoCs
description ioc Process File created C:\Windows\SysWOW64\macromd\uncle fred spanking his young nieces little ass.mpg.pif 1b8a7aa9d6ad2bf4f3e063bd4be538b57db98466b1132a08dda1bd2e92d36aef.exe File created C:\Windows\SysWOW64\macromd\hot blonde teen sucking old dick.mpg.pif 1b8a7aa9d6ad2bf4f3e063bd4be538b57db98466b1132a08dda1bd2e92d36aef.exe File created C:\Windows\SysWOW64\macromd\this really wild insane groupsex.mpg.pif 1b8a7aa9d6ad2bf4f3e063bd4be538b57db98466b1132a08dda1bd2e92d36aef.exe File created C:\Windows\SysWOW64\winxcfg.exe 1b8a7aa9d6ad2bf4f3e063bd4be538b57db98466b1132a08dda1bd2e92d36aef.exe File created C:\Windows\SysWOW64\macromd\pamela anderson nude.exe 1b8a7aa9d6ad2bf4f3e063bd4be538b57db98466b1132a08dda1bd2e92d36aef.exe File created C:\Windows\SysWOW64\macromd\career girls playing with their snatch after work.mpg.pif 1b8a7aa9d6ad2bf4f3e063bd4be538b57db98466b1132a08dda1bd2e92d36aef.exe File created C:\Windows\SysWOW64\macromd\girls with cock in hand and mouths fill with cum .mpg.pif 1b8a7aa9d6ad2bf4f3e063bd4be538b57db98466b1132a08dda1bd2e92d36aef.exe File created C:\Windows\SysWOW64\macromd\two studs gangbanging a hot little sluts holes.mpg.pif 1b8a7aa9d6ad2bf4f3e063bd4be538b57db98466b1132a08dda1bd2e92d36aef.exe File created C:\Windows\SysWOW64\macromd\teen taking off her panties outdoors.mpg.pif 1b8a7aa9d6ad2bf4f3e063bd4be538b57db98466b1132a08dda1bd2e92d36aef.exe File created C:\Windows\SysWOW64\macromd\amateur slut with a huge gun.mpg.pif 1b8a7aa9d6ad2bf4f3e063bd4be538b57db98466b1132a08dda1bd2e92d36aef.exe File created C:\Windows\SysWOW64\macromd\asian studys how to strip.mpg.pif 1b8a7aa9d6ad2bf4f3e063bd4be538b57db98466b1132a08dda1bd2e92d36aef.exe File created C:\Windows\SysWOW64\macromd\genuine indian slut posing.mpg.pif 1b8a7aa9d6ad2bf4f3e063bd4be538b57db98466b1132a08dda1bd2e92d36aef.exe File created C:\Windows\SysWOW64\macromd\petite ebony enjoying her joy toy.mpg.pif 1b8a7aa9d6ad2bf4f3e063bd4be538b57db98466b1132a08dda1bd2e92d36aef.exe File created C:\Windows\SysWOW64\macromd\twink stroking his butt plugger.mpg.pif 1b8a7aa9d6ad2bf4f3e063bd4be538b57db98466b1132a08dda1bd2e92d36aef.exe File created C:\Windows\SysWOW64\macromd\nasty brunette getting hard jolting.mpg.pif 1b8a7aa9d6ad2bf4f3e063bd4be538b57db98466b1132a08dda1bd2e92d36aef.exe File created C:\Windows\SysWOW64\macromd\two large black bones in a small white box.mpg.pif 1b8a7aa9d6ad2bf4f3e063bd4be538b57db98466b1132a08dda1bd2e92d36aef.exe File created C:\Windows\SysWOW64\macromd\hot babe showing her pussy and wanting a stiff cock.mpg.pif 1b8a7aa9d6ad2bf4f3e063bd4be538b57db98466b1132a08dda1bd2e92d36aef.exe File created C:\Windows\SysWOW64\macromd\babes with an assortment of delicious big juggs.mpg.pif 1b8a7aa9d6ad2bf4f3e063bd4be538b57db98466b1132a08dda1bd2e92d36aef.exe File created C:\Windows\SysWOW64\macromd\babe enjoys juicy cumshot.mpg.pif 1b8a7aa9d6ad2bf4f3e063bd4be538b57db98466b1132a08dda1bd2e92d36aef.exe File created C:\Windows\SysWOW64\macromd\honie displaying raw pink ass.mpg.pif 1b8a7aa9d6ad2bf4f3e063bd4be538b57db98466b1132a08dda1bd2e92d36aef.exe File created C:\Windows\SysWOW64\macromd\beautiful blonde gettin an anal fucking.mpg.pif 1b8a7aa9d6ad2bf4f3e063bd4be538b57db98466b1132a08dda1bd2e92d36aef.exe File created C:\Windows\SysWOW64\macromd\illegal porno - 15 year old raped by two men on boat.mpg.pif 1b8a7aa9d6ad2bf4f3e063bd4be538b57db98466b1132a08dda1bd2e92d36aef.exe File created C:\Windows\SysWOW64\macromd\blonde showing her pussy to her neighbor.mpg.pif 1b8a7aa9d6ad2bf4f3e063bd4be538b57db98466b1132a08dda1bd2e92d36aef.exe File created C:\Windows\SysWOW64\macromd\slutty japanese babe giving blowjob.mpg.pif 1b8a7aa9d6ad2bf4f3e063bd4be538b57db98466b1132a08dda1bd2e92d36aef.exe File created C:\Windows\SysWOW64\macromd\black girl gets dildo wet.mpg.pif 1b8a7aa9d6ad2bf4f3e063bd4be538b57db98466b1132a08dda1bd2e92d36aef.exe File created C:\Windows\SysWOW64\macromd\hot actress heather graham naked.mpg.pif 1b8a7aa9d6ad2bf4f3e063bd4be538b57db98466b1132a08dda1bd2e92d36aef.exe File created C:\Windows\SysWOW64\macromd\yahoo cracker.exe 1b8a7aa9d6ad2bf4f3e063bd4be538b57db98466b1132a08dda1bd2e92d36aef.exe File created C:\Windows\SysWOW64\macromd\aimcracker.exe 1b8a7aa9d6ad2bf4f3e063bd4be538b57db98466b1132a08dda1bd2e92d36aef.exe File created C:\Windows\SysWOW64\macromd\chubby girl bukkake gang banged sucking cock.mpg.pif 1b8a7aa9d6ad2bf4f3e063bd4be538b57db98466b1132a08dda1bd2e92d36aef.exe File created C:\Windows\SysWOW64\macromd\hot teeny sucking cock.mpg.pif 1b8a7aa9d6ad2bf4f3e063bd4be538b57db98466b1132a08dda1bd2e92d36aef.exe File created C:\Windows\SysWOW64\macromd\Another bang bus victim forced rape sex cum.mpg.exe 1b8a7aa9d6ad2bf4f3e063bd4be538b57db98466b1132a08dda1bd2e92d36aef.exe File created C:\Windows\SysWOW64\macromd\wife in kitchen preparing hot pussy for hubby's dinner.mpg.pif 1b8a7aa9d6ad2bf4f3e063bd4be538b57db98466b1132a08dda1bd2e92d36aef.exe File created C:\Windows\SysWOW64\macromd\blonde babe handfucking herself.mpg.pif 1b8a7aa9d6ad2bf4f3e063bd4be538b57db98466b1132a08dda1bd2e92d36aef.exe