Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
35s -
max time network
45s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
20/10/2022, 07:29
Behavioral task
behavioral1
Sample
dc3cf17a8d7d580e863aa29ea9509117a5c1cb14b6836ec16cd84c010fbb694a.exe
Resource
win7-20220812-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
dc3cf17a8d7d580e863aa29ea9509117a5c1cb14b6836ec16cd84c010fbb694a.exe
Resource
win10v2004-20220812-en
windows10-2004-x64
3 signatures
150 seconds
General
-
Target
dc3cf17a8d7d580e863aa29ea9509117a5c1cb14b6836ec16cd84c010fbb694a.exe
-
Size
73KB
-
MD5
7a5277ba77ba3bb55e274422a4e1de80
-
SHA1
6e7a6ef96b37d2210cc42f4b1b50abfb537fdb4c
-
SHA256
dc3cf17a8d7d580e863aa29ea9509117a5c1cb14b6836ec16cd84c010fbb694a
-
SHA512
e9b205e5f16e57d6eb24d0675a52fba9feadd8126ef665f9bab68069c8eeb8eb738cfdefdeb0848583ce069978fe3791cc472b6f8117e16c061cb0946e13cfaa
-
SSDEEP
1536:5lrsicagdzn8K2ariPOcjk+XQuPVN72NMSQ8v/ebbXKk/0abz:5JjcF8KfCOcjk+guPVjSQJbbXsabz
Score
8/10
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/688-54-0x0000000000400000-0x0000000000467000-memory.dmp upx behavioral1/memory/688-55-0x0000000000400000-0x0000000000467000-memory.dmp upx -
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\winxcfg.exe = "C:\\Windows\\system32\\winxcfg.exe" dc3cf17a8d7d580e863aa29ea9509117a5c1cb14b6836ec16cd84c010fbb694a.exe -
Drops file in System32 directory 33 IoCs
description ioc Process File created C:\Windows\SysWOW64\macromd\first time anal and she loves it.mpg.pif dc3cf17a8d7d580e863aa29ea9509117a5c1cb14b6836ec16cd84c010fbb694a.exe File created C:\Windows\SysWOW64\macromd\swimmingpool threesome fuck suck group sucking.mpg.pif dc3cf17a8d7d580e863aa29ea9509117a5c1cb14b6836ec16cd84c010fbb694a.exe File created C:\Windows\SysWOW64\macromd\genuine indian slut posing.mpg.pif dc3cf17a8d7d580e863aa29ea9509117a5c1cb14b6836ec16cd84c010fbb694a.exe File created C:\Windows\SysWOW64\macromd\pigtail black babe with pretty boy.mpg.pif dc3cf17a8d7d580e863aa29ea9509117a5c1cb14b6836ec16cd84c010fbb694a.exe File created C:\Windows\SysWOW64\winxcfg.exe dc3cf17a8d7d580e863aa29ea9509117a5c1cb14b6836ec16cd84c010fbb694a.exe File created C:\Windows\SysWOW64\macromd\AOL.exe dc3cf17a8d7d580e863aa29ea9509117a5c1cb14b6836ec16cd84c010fbb694a.exe File created C:\Windows\SysWOW64\macromd\tenderonie who insist her pussy must always be free.mpg.pif dc3cf17a8d7d580e863aa29ea9509117a5c1cb14b6836ec16cd84c010fbb694a.exe File created C:\Windows\SysWOW64\macromd\teen spreading in the kitchen.mpg.pif dc3cf17a8d7d580e863aa29ea9509117a5c1cb14b6836ec16cd84c010fbb694a.exe File created C:\Windows\SysWOW64\macromd\Grand theft auto 3 CD1 crack.exe dc3cf17a8d7d580e863aa29ea9509117a5c1cb14b6836ec16cd84c010fbb694a.exe File created C:\Windows\SysWOW64\macromd\kill osama bin laden game.exe dc3cf17a8d7d580e863aa29ea9509117a5c1cb14b6836ec16cd84c010fbb694a.exe File created C:\Windows\SysWOW64\macromd\jenna jameson - built for speed.exe dc3cf17a8d7d580e863aa29ea9509117a5c1cb14b6836ec16cd84c010fbb694a.exe File created C:\Windows\SysWOW64\macromd\jenna jameson sex scene huge dick blowjob.scr dc3cf17a8d7d580e863aa29ea9509117a5c1cb14b6836ec16cd84c010fbb694a.exe File created C:\Windows\SysWOW64\macromd\Counter Strike CD Keygen.exe dc3cf17a8d7d580e863aa29ea9509117a5c1cb14b6836ec16cd84c010fbb694a.exe File created C:\Windows\SysWOW64\macromd\yummy lesbos licking.mpg.pif dc3cf17a8d7d580e863aa29ea9509117a5c1cb14b6836ec16cd84c010fbb694a.exe File created C:\Windows\SysWOW64\macromd\cute petite amateur girl spreading her snatch.mpg.pif dc3cf17a8d7d580e863aa29ea9509117a5c1cb14b6836ec16cd84c010fbb694a.exe File created C:\Windows\SysWOW64\macromd\wild ebony slut taking two cocks.mpg.pif dc3cf17a8d7d580e863aa29ea9509117a5c1cb14b6836ec16cd84c010fbb694a.exe File created C:\Windows\SysWOW64\macromd\toying blonde with fucking machine.mpg.pif dc3cf17a8d7d580e863aa29ea9509117a5c1cb14b6836ec16cd84c010fbb694a.exe File created C:\Windows\SysWOW64\macromd\aol password cracker.exe dc3cf17a8d7d580e863aa29ea9509117a5c1cb14b6836ec16cd84c010fbb694a.exe File created C:\Windows\SysWOW64\macromd\chicks working orgasm from dude's cock as a present.mpg.pif dc3cf17a8d7d580e863aa29ea9509117a5c1cb14b6836ec16cd84c010fbb694a.exe File created C:\Windows\SysWOW64\macromd\blonde with titts and cunt sending chills thru cock.mpg.pif dc3cf17a8d7d580e863aa29ea9509117a5c1cb14b6836ec16cd84c010fbb694a.exe File created C:\Windows\SysWOW64\macromd\dude getting off in lover's mouth at party.mpg.pif dc3cf17a8d7d580e863aa29ea9509117a5c1cb14b6836ec16cd84c010fbb694a.exe File created C:\Windows\SysWOW64\macromd\two teenie boppers learning to eat pussy.mpg.pif dc3cf17a8d7d580e863aa29ea9509117a5c1cb14b6836ec16cd84c010fbb694a.exe File created C:\Windows\SysWOW64\macromd\babe leading pussy-whipped stud around by her cunt.mpg.pif dc3cf17a8d7d580e863aa29ea9509117a5c1cb14b6836ec16cd84c010fbb694a.exe File created C:\Windows\SysWOW64\macromd\asian girls stuffed mouth shots.mpg.pif dc3cf17a8d7d580e863aa29ea9509117a5c1cb14b6836ec16cd84c010fbb694a.exe File created C:\Windows\SysWOW64\macromd\black girl gets dildo wet.mpg.pif dc3cf17a8d7d580e863aa29ea9509117a5c1cb14b6836ec16cd84c010fbb694a.exe File created C:\Windows\SysWOW64\macromd\Choke on cum (sodomy, rape).mpg.exe dc3cf17a8d7d580e863aa29ea9509117a5c1cb14b6836ec16cd84c010fbb694a.exe File created C:\Windows\SysWOW64\macromd\AOL, MSN, Yahoo mail password stealer.exe dc3cf17a8d7d580e863aa29ea9509117a5c1cb14b6836ec16cd84c010fbb694a.exe File created C:\Windows\SysWOW64\macromd\Pamela Anderson.exe dc3cf17a8d7d580e863aa29ea9509117a5c1cb14b6836ec16cd84c010fbb694a.exe File created C:\Windows\SysWOW64\macromd\ebony girl with massive hooters.mpg.pif dc3cf17a8d7d580e863aa29ea9509117a5c1cb14b6836ec16cd84c010fbb694a.exe File created C:\Windows\SysWOW64\macromd\petite ebony enjoying her joy toy.mpg.pif dc3cf17a8d7d580e863aa29ea9509117a5c1cb14b6836ec16cd84c010fbb694a.exe File created C:\Windows\SysWOW64\macromd\Windows 2000.exe dc3cf17a8d7d580e863aa29ea9509117a5c1cb14b6836ec16cd84c010fbb694a.exe File created C:\Windows\SysWOW64\macromd\momma's juggs that make you scream for mercy.mpg.pif dc3cf17a8d7d580e863aa29ea9509117a5c1cb14b6836ec16cd84c010fbb694a.exe File created C:\Windows\SysWOW64\macromd\two studs fucking the hell out of a slut from behind.mpg.pif dc3cf17a8d7d580e863aa29ea9509117a5c1cb14b6836ec16cd84c010fbb694a.exe