Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
149s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
19/10/2022, 19:10
Behavioral task
behavioral1
Sample
07dea62ffe3b1aee3ab9df2ed14b7fcb2557a5078c304e0bcf230d34de79d33b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
07dea62ffe3b1aee3ab9df2ed14b7fcb2557a5078c304e0bcf230d34de79d33b.exe
Resource
win10v2004-20220812-en
General
-
Target
07dea62ffe3b1aee3ab9df2ed14b7fcb2557a5078c304e0bcf230d34de79d33b.exe
-
Size
95KB
-
MD5
a1361b48fc3c76a3be3b5520944f93c0
-
SHA1
6dd9dacf92ddc08484489aaa5335d9b276173a29
-
SHA256
07dea62ffe3b1aee3ab9df2ed14b7fcb2557a5078c304e0bcf230d34de79d33b
-
SHA512
cff716c43e4a390eb81c802acd8ec432514e1b1a891ac1d22d20bb31d1c278cf7e9d0bda46f60b5b424f70275970138348c43472e1f4149a4d32b6f431b12de5
-
SSDEEP
1536:5lrsicagdzn8K2ariPOcjk+XQuPVN72NMSqU7guh4LWwW9q7f9J4Ek6sH79D48X5:5JjcF8KfCOcjk+guPVjSNtHPefQEk6Er
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/4480-132-0x0000000000400000-0x0000000000467000-memory.dmp upx behavioral2/memory/4480-133-0x0000000000400000-0x0000000000467000-memory.dmp upx -
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\winxcfg.exe = "C:\\Windows\\system32\\winxcfg.exe" 07dea62ffe3b1aee3ab9df2ed14b7fcb2557a5078c304e0bcf230d34de79d33b.exe -
Drops file in System32 directory 33 IoCs
description ioc Process File created C:\Windows\SysWOW64\macromd\gangbang tryout with young slut and two studs.mpg.pif 07dea62ffe3b1aee3ab9df2ed14b7fcb2557a5078c304e0bcf230d34de79d33b.exe File created C:\Windows\SysWOW64\macromd\Cable Modem Uncapper.exe 07dea62ffe3b1aee3ab9df2ed14b7fcb2557a5078c304e0bcf230d34de79d33b.exe File created C:\Windows\SysWOW64\macromd\two kinky old lezbos snapping the whip.mpg.pif 07dea62ffe3b1aee3ab9df2ed14b7fcb2557a5078c304e0bcf230d34de79d33b.exe File created C:\Windows\SysWOW64\macromd\babes letting dudes assault their furballs.mpg.pif 07dea62ffe3b1aee3ab9df2ed14b7fcb2557a5078c304e0bcf230d34de79d33b.exe File created C:\Windows\SysWOW64\macromd\dedicated honie giving dude a helping hand and head.mpg.pif 07dea62ffe3b1aee3ab9df2ed14b7fcb2557a5078c304e0bcf230d34de79d33b.exe File created C:\Windows\SysWOW64\macromd\hot babe getting pussy eaten by horny girlfriend.mpg.pif 07dea62ffe3b1aee3ab9df2ed14b7fcb2557a5078c304e0bcf230d34de79d33b.exe File created C:\Windows\SysWOW64\macromd\gorgious babe who quit school to model pretty pink.mpg.pif 07dea62ffe3b1aee3ab9df2ed14b7fcb2557a5078c304e0bcf230d34de79d33b.exe File created C:\Windows\SysWOW64\macromd\momma's juggs that make you scream for mercy.mpg.pif 07dea62ffe3b1aee3ab9df2ed14b7fcb2557a5078c304e0bcf230d34de79d33b.exe File created C:\Windows\SysWOW64\macromd\hot hungry sluts sucking cum for a line of coke.mpg.pif 07dea62ffe3b1aee3ab9df2ed14b7fcb2557a5078c304e0bcf230d34de79d33b.exe File created C:\Windows\SysWOW64\macromd\yummy lesbos licking wet pussy holes.mpg.pif 07dea62ffe3b1aee3ab9df2ed14b7fcb2557a5078c304e0bcf230d34de79d33b.exe File created C:\Windows\SysWOW64\macromd\tiny girl opening hole in crazy wish of cock.mpg.pif 07dea62ffe3b1aee3ab9df2ed14b7fcb2557a5078c304e0bcf230d34de79d33b.exe File created C:\Windows\SysWOW64\macromd\preteen sucking huge cock illegal.mpg.exe 07dea62ffe3b1aee3ab9df2ed14b7fcb2557a5078c304e0bcf230d34de79d33b.exe File created C:\Windows\SysWOW64\macromd\MSN Password Hacker and Stealer.exe 07dea62ffe3b1aee3ab9df2ed14b7fcb2557a5078c304e0bcf230d34de79d33b.exe File created C:\Windows\SysWOW64\macromd\hot babe showing her pussy and wanting a stiff cock.mpg.pif 07dea62ffe3b1aee3ab9df2ed14b7fcb2557a5078c304e0bcf230d34de79d33b.exe File created C:\Windows\SysWOW64\winxcfg.exe 07dea62ffe3b1aee3ab9df2ed14b7fcb2557a5078c304e0bcf230d34de79d33b.exe File created C:\Windows\SysWOW64\macromd\polish naturals with nice round titties.mpg.pif 07dea62ffe3b1aee3ab9df2ed14b7fcb2557a5078c304e0bcf230d34de79d33b.exe File created C:\Windows\SysWOW64\macromd\sexy pink pussy girl taking it off.mpg.pif 07dea62ffe3b1aee3ab9df2ed14b7fcb2557a5078c304e0bcf230d34de79d33b.exe File created C:\Windows\SysWOW64\macromd\amateur swinger babe sucking on a couple of cocks.mpg.pif 07dea62ffe3b1aee3ab9df2ed14b7fcb2557a5078c304e0bcf230d34de79d33b.exe File created C:\Windows\SysWOW64\macromd\Blonde and Japanese girl bukkake.mpg.exe 07dea62ffe3b1aee3ab9df2ed14b7fcb2557a5078c304e0bcf230d34de79d33b.exe File created C:\Windows\SysWOW64\macromd\kill osama bin laden game.exe 07dea62ffe3b1aee3ab9df2ed14b7fcb2557a5078c304e0bcf230d34de79d33b.exe File created C:\Windows\SysWOW64\macromd\Counter Strike CD Keygen.exe 07dea62ffe3b1aee3ab9df2ed14b7fcb2557a5078c304e0bcf230d34de79d33b.exe File created C:\Windows\SysWOW64\macromd\jenna jameson - built for speed.exe 07dea62ffe3b1aee3ab9df2ed14b7fcb2557a5078c304e0bcf230d34de79d33b.exe File created C:\Windows\SysWOW64\macromd\chicks working orgasm from dude's cock as a present.mpg.pif 07dea62ffe3b1aee3ab9df2ed14b7fcb2557a5078c304e0bcf230d34de79d33b.exe File created C:\Windows\SysWOW64\macromd\blonde with titts and cunt sending chills thru cock.mpg.pif 07dea62ffe3b1aee3ab9df2ed14b7fcb2557a5078c304e0bcf230d34de79d33b.exe File created C:\Windows\SysWOW64\macromd\career girls playing with their snatch after work.mpg.pif 07dea62ffe3b1aee3ab9df2ed14b7fcb2557a5078c304e0bcf230d34de79d33b.exe File created C:\Windows\SysWOW64\macromd\some hard sucking and fucking babes.mpg.pif 07dea62ffe3b1aee3ab9df2ed14b7fcb2557a5078c304e0bcf230d34de79d33b.exe File created C:\Windows\SysWOW64\macromd\Britney Spears Dance Beat.exe 07dea62ffe3b1aee3ab9df2ed14b7fcb2557a5078c304e0bcf230d34de79d33b.exe File created C:\Windows\SysWOW64\macromd\16 year old webcam.mpg.exe 07dea62ffe3b1aee3ab9df2ed14b7fcb2557a5078c304e0bcf230d34de79d33b.exe File created C:\Windows\SysWOW64\macromd\horny teen waking up with her pink pussy spread.mpg.pif 07dea62ffe3b1aee3ab9df2ed14b7fcb2557a5078c304e0bcf230d34de79d33b.exe File created C:\Windows\SysWOW64\macromd\virtua girl - bailey short skirt.pif 07dea62ffe3b1aee3ab9df2ed14b7fcb2557a5078c304e0bcf230d34de79d33b.exe File created C:\Windows\SysWOW64\macromd\Preteen Rape Sex Illegal - Jenny - 13 Years old.mpg.pif 07dea62ffe3b1aee3ab9df2ed14b7fcb2557a5078c304e0bcf230d34de79d33b.exe File created C:\Windows\SysWOW64\macromd\pamela anderson naked.mpg.exe 07dea62ffe3b1aee3ab9df2ed14b7fcb2557a5078c304e0bcf230d34de79d33b.exe File created C:\Windows\SysWOW64\macromd\Harry Potter and the sorcerors stone.divx.exe 07dea62ffe3b1aee3ab9df2ed14b7fcb2557a5078c304e0bcf230d34de79d33b.exe