Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
36s -
max time network
44s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
20/10/2022, 18:14
Behavioral task
behavioral1
Sample
757e719f2e5988bcf44b49e95bf05a3c18887f2354c16133cf6396b95f3c808f.exe
Resource
win7-20220812-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
757e719f2e5988bcf44b49e95bf05a3c18887f2354c16133cf6396b95f3c808f.exe
Resource
win10v2004-20220812-en
windows10-2004-x64
3 signatures
150 seconds
General
-
Target
757e719f2e5988bcf44b49e95bf05a3c18887f2354c16133cf6396b95f3c808f.exe
-
Size
93KB
-
MD5
a023618e7ecbda78b137040bd9b6e6c0
-
SHA1
644abe11a6a00cf931056878966080b15c68a534
-
SHA256
757e719f2e5988bcf44b49e95bf05a3c18887f2354c16133cf6396b95f3c808f
-
SHA512
4f97241f1f184d4c7d8c0a6c6edcf35f0dba78fade8bf01b01de3c2f977994cfd22e3a29108be3d828cd0ad4de9e2339d570b1a757ca036fb57ec1ef822762e7
-
SSDEEP
1536:5lrsicagdzn8K2ariPOcjk+XQuPVN72NMSlfwGX2z+LJYHeukJ7YJB:5JjcF8KfCOcjk+guPVjSloGmWZIX
Score
8/10
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/1388-54-0x0000000000400000-0x0000000000467000-memory.dmp upx behavioral1/memory/1388-55-0x0000000000400000-0x0000000000467000-memory.dmp upx -
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\winxcfg.exe = "C:\\Windows\\system32\\winxcfg.exe" 757e719f2e5988bcf44b49e95bf05a3c18887f2354c16133cf6396b95f3c808f.exe -
Drops file in System32 directory 33 IoCs
description ioc Process File created C:\Windows\SysWOW64\macromd\honie playing in her cunt with newly bought toy.mpg.pif 757e719f2e5988bcf44b49e95bf05a3c18887f2354c16133cf6396b95f3c808f.exe File created C:\Windows\SysWOW64\macromd\gorgious babe who quit school to model pretty pink.mpg.pif 757e719f2e5988bcf44b49e95bf05a3c18887f2354c16133cf6396b95f3c808f.exe File created C:\Windows\SysWOW64\macromd\ebony spreading her pink wet pussy.mpg.pif 757e719f2e5988bcf44b49e95bf05a3c18887f2354c16133cf6396b95f3c808f.exe File created C:\Windows\SysWOW64\macromd\petite ebony enjoying her joy toy.mpg.pif 757e719f2e5988bcf44b49e95bf05a3c18887f2354c16133cf6396b95f3c808f.exe File created C:\Windows\SysWOW64\macromd\illegal porno - 15 year old raped by two men on boat.mpg.pif 757e719f2e5988bcf44b49e95bf05a3c18887f2354c16133cf6396b95f3c808f.exe File created C:\Windows\SysWOW64\macromd\some fine amateur pussy shots from behind.mpg.pif 757e719f2e5988bcf44b49e95bf05a3c18887f2354c16133cf6396b95f3c808f.exe File created C:\Windows\SysWOW64\macromd\girls with cock in hand and mouths fill with cum .mpg.pif 757e719f2e5988bcf44b49e95bf05a3c18887f2354c16133cf6396b95f3c808f.exe File created C:\Windows\SysWOW64\macromd\busty ebony girl showing shaved pus.mpg.pif 757e719f2e5988bcf44b49e95bf05a3c18887f2354c16133cf6396b95f3c808f.exe File created C:\Windows\SysWOW64\macromd\blonde in jeans undressing and teasing her snatch.mpg.pif 757e719f2e5988bcf44b49e95bf05a3c18887f2354c16133cf6396b95f3c808f.exe File created C:\Windows\SysWOW64\macromd\the skirt of a babe on the stairs.mpg.pif 757e719f2e5988bcf44b49e95bf05a3c18887f2354c16133cf6396b95f3c808f.exe File created C:\Windows\SysWOW64\macromd\AOL, MSN, Yahoo mail password stealer.exe 757e719f2e5988bcf44b49e95bf05a3c18887f2354c16133cf6396b95f3c808f.exe File created C:\Windows\SysWOW64\macromd\honies letting dudes flush mouths full of hot cum.mpg.pif 757e719f2e5988bcf44b49e95bf05a3c18887f2354c16133cf6396b95f3c808f.exe File created C:\Windows\SysWOW64\macromd\2 horny babes doing 1 lucky dude.mpg.pif 757e719f2e5988bcf44b49e95bf05a3c18887f2354c16133cf6396b95f3c808f.exe File created C:\Windows\SysWOW64\macromd\beautiful babes extending love and compassion.mpg.pif 757e719f2e5988bcf44b49e95bf05a3c18887f2354c16133cf6396b95f3c808f.exe File created C:\Windows\SysWOW64\macromd\lonely teen thinking of cock while fingering it.mpg.pif 757e719f2e5988bcf44b49e95bf05a3c18887f2354c16133cf6396b95f3c808f.exe File created C:\Windows\SysWOW64\macromd\busty babe on a balcony.mpg.pif 757e719f2e5988bcf44b49e95bf05a3c18887f2354c16133cf6396b95f3c808f.exe File created C:\Windows\SysWOW64\macromd\Preteen Rape Sex Illegal - Jenny - 13 Years old.mpg.pif 757e719f2e5988bcf44b49e95bf05a3c18887f2354c16133cf6396b95f3c808f.exe File created C:\Windows\SysWOW64\macromd\hot blonde teen sucking old dick.mpg.pif 757e719f2e5988bcf44b49e95bf05a3c18887f2354c16133cf6396b95f3c808f.exe File created C:\Windows\SysWOW64\macromd\trannie posing as a princess.mpg.pif 757e719f2e5988bcf44b49e95bf05a3c18887f2354c16133cf6396b95f3c808f.exe File created C:\Windows\SysWOW64\macromd\sexy beautiful soon to be pornstar.mpg.pif 757e719f2e5988bcf44b49e95bf05a3c18887f2354c16133cf6396b95f3c808f.exe File created C:\Windows\SysWOW64\macromd\sexy teen lesbians licking pussy.mpg.pif 757e719f2e5988bcf44b49e95bf05a3c18887f2354c16133cf6396b95f3c808f.exe File created C:\Windows\SysWOW64\macromd\Website Hacker.exe 757e719f2e5988bcf44b49e95bf05a3c18887f2354c16133cf6396b95f3c808f.exe File created C:\Windows\SysWOW64\macromd\GTA 3 Crack.exe 757e719f2e5988bcf44b49e95bf05a3c18887f2354c16133cf6396b95f3c808f.exe File created C:\Windows\SysWOW64\macromd\wife in kitchen preparing hot pussy for hubby's dinner.mpg.pif 757e719f2e5988bcf44b49e95bf05a3c18887f2354c16133cf6396b95f3c808f.exe File created C:\Windows\SysWOW64\macromd\action with three chicks getting it on with a guy.mpg.pif 757e719f2e5988bcf44b49e95bf05a3c18887f2354c16133cf6396b95f3c808f.exe File created C:\Windows\SysWOW64\macromd\two hot college girl fucking in class.mpg.pif 757e719f2e5988bcf44b49e95bf05a3c18887f2354c16133cf6396b95f3c808f.exe File created C:\Windows\SysWOW64\macromd\teen babe taken a shower.mpg.pif 757e719f2e5988bcf44b49e95bf05a3c18887f2354c16133cf6396b95f3c808f.exe File created C:\Windows\SysWOW64\winxcfg.exe 757e719f2e5988bcf44b49e95bf05a3c18887f2354c16133cf6396b95f3c808f.exe File created C:\Windows\SysWOW64\macromd\jenna jameson - xxx nurse scene.mpg.pif 757e719f2e5988bcf44b49e95bf05a3c18887f2354c16133cf6396b95f3c808f.exe File created C:\Windows\SysWOW64\macromd\two teen lesbians with dildo having fun.mpg.pif 757e719f2e5988bcf44b49e95bf05a3c18887f2354c16133cf6396b95f3c808f.exe File created C:\Windows\SysWOW64\macromd\senior blonde fucking and suckin like a teen.mpg.pif 757e719f2e5988bcf44b49e95bf05a3c18887f2354c16133cf6396b95f3c808f.exe File created C:\Windows\SysWOW64\macromd\brazilian supermodel adriana lima.mpg.pif 757e719f2e5988bcf44b49e95bf05a3c18887f2354c16133cf6396b95f3c808f.exe File created C:\Windows\SysWOW64\macromd\wild hoe showing spreading the pink.mpg.pif 757e719f2e5988bcf44b49e95bf05a3c18887f2354c16133cf6396b95f3c808f.exe