Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
153s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
21/10/2022, 05:18
Static task
static1
Behavioral task
behavioral1
Sample
f133b82450530c055ce9b53984260eb4b9018614542d23a35b40d712616e1042.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f133b82450530c055ce9b53984260eb4b9018614542d23a35b40d712616e1042.exe
Resource
win10v2004-20220812-en
General
-
Target
f133b82450530c055ce9b53984260eb4b9018614542d23a35b40d712616e1042.exe
-
Size
64KB
-
MD5
5bab09faba8fe3e31b093e5ef8cf389c
-
SHA1
2dbadaa32662f95a667a51df1d4710853490e40d
-
SHA256
f133b82450530c055ce9b53984260eb4b9018614542d23a35b40d712616e1042
-
SHA512
af4d91b9a054930d6aa39ba74851eb710233d123f625f5554a17ebf8c8ca115f7884cf4d759a71ce9e5eae36e339bd174ecd75ade1213db1edf8f8be0710a83e
-
SSDEEP
768:w6y4y49/HA/lhifdEe4YBEI0b0PP7p89CxqH2bWL2FfcrCsl8Y:w6zKlJrYBEI00sEqH2bW4UrqY
Malware Config
Signatures
-
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 2960 f133b82450530c055ce9b53984260eb4b9018614542d23a35b40d712616e1042.exe 2960 f133b82450530c055ce9b53984260eb4b9018614542d23a35b40d712616e1042.exe 2960 f133b82450530c055ce9b53984260eb4b9018614542d23a35b40d712616e1042.exe 2960 f133b82450530c055ce9b53984260eb4b9018614542d23a35b40d712616e1042.exe 2960 f133b82450530c055ce9b53984260eb4b9018614542d23a35b40d712616e1042.exe 2960 f133b82450530c055ce9b53984260eb4b9018614542d23a35b40d712616e1042.exe 2960 f133b82450530c055ce9b53984260eb4b9018614542d23a35b40d712616e1042.exe 2960 f133b82450530c055ce9b53984260eb4b9018614542d23a35b40d712616e1042.exe 2960 f133b82450530c055ce9b53984260eb4b9018614542d23a35b40d712616e1042.exe 2960 f133b82450530c055ce9b53984260eb4b9018614542d23a35b40d712616e1042.exe 2960 f133b82450530c055ce9b53984260eb4b9018614542d23a35b40d712616e1042.exe 2960 f133b82450530c055ce9b53984260eb4b9018614542d23a35b40d712616e1042.exe 2960 f133b82450530c055ce9b53984260eb4b9018614542d23a35b40d712616e1042.exe 2960 f133b82450530c055ce9b53984260eb4b9018614542d23a35b40d712616e1042.exe 2960 f133b82450530c055ce9b53984260eb4b9018614542d23a35b40d712616e1042.exe 2960 f133b82450530c055ce9b53984260eb4b9018614542d23a35b40d712616e1042.exe 2960 f133b82450530c055ce9b53984260eb4b9018614542d23a35b40d712616e1042.exe 2960 f133b82450530c055ce9b53984260eb4b9018614542d23a35b40d712616e1042.exe 2960 f133b82450530c055ce9b53984260eb4b9018614542d23a35b40d712616e1042.exe 2960 f133b82450530c055ce9b53984260eb4b9018614542d23a35b40d712616e1042.exe 2960 f133b82450530c055ce9b53984260eb4b9018614542d23a35b40d712616e1042.exe 2960 f133b82450530c055ce9b53984260eb4b9018614542d23a35b40d712616e1042.exe 2960 f133b82450530c055ce9b53984260eb4b9018614542d23a35b40d712616e1042.exe 2960 f133b82450530c055ce9b53984260eb4b9018614542d23a35b40d712616e1042.exe 2960 f133b82450530c055ce9b53984260eb4b9018614542d23a35b40d712616e1042.exe 2960 f133b82450530c055ce9b53984260eb4b9018614542d23a35b40d712616e1042.exe 2960 f133b82450530c055ce9b53984260eb4b9018614542d23a35b40d712616e1042.exe 2960 f133b82450530c055ce9b53984260eb4b9018614542d23a35b40d712616e1042.exe 2960 f133b82450530c055ce9b53984260eb4b9018614542d23a35b40d712616e1042.exe 2960 f133b82450530c055ce9b53984260eb4b9018614542d23a35b40d712616e1042.exe 2960 f133b82450530c055ce9b53984260eb4b9018614542d23a35b40d712616e1042.exe 2960 f133b82450530c055ce9b53984260eb4b9018614542d23a35b40d712616e1042.exe 2960 f133b82450530c055ce9b53984260eb4b9018614542d23a35b40d712616e1042.exe 2960 f133b82450530c055ce9b53984260eb4b9018614542d23a35b40d712616e1042.exe 2960 f133b82450530c055ce9b53984260eb4b9018614542d23a35b40d712616e1042.exe 2960 f133b82450530c055ce9b53984260eb4b9018614542d23a35b40d712616e1042.exe 2960 f133b82450530c055ce9b53984260eb4b9018614542d23a35b40d712616e1042.exe 2960 f133b82450530c055ce9b53984260eb4b9018614542d23a35b40d712616e1042.exe 2960 f133b82450530c055ce9b53984260eb4b9018614542d23a35b40d712616e1042.exe 2960 f133b82450530c055ce9b53984260eb4b9018614542d23a35b40d712616e1042.exe 2960 f133b82450530c055ce9b53984260eb4b9018614542d23a35b40d712616e1042.exe 2960 f133b82450530c055ce9b53984260eb4b9018614542d23a35b40d712616e1042.exe 2960 f133b82450530c055ce9b53984260eb4b9018614542d23a35b40d712616e1042.exe 2960 f133b82450530c055ce9b53984260eb4b9018614542d23a35b40d712616e1042.exe 2960 f133b82450530c055ce9b53984260eb4b9018614542d23a35b40d712616e1042.exe 2960 f133b82450530c055ce9b53984260eb4b9018614542d23a35b40d712616e1042.exe 2960 f133b82450530c055ce9b53984260eb4b9018614542d23a35b40d712616e1042.exe 2960 f133b82450530c055ce9b53984260eb4b9018614542d23a35b40d712616e1042.exe 2960 f133b82450530c055ce9b53984260eb4b9018614542d23a35b40d712616e1042.exe 2960 f133b82450530c055ce9b53984260eb4b9018614542d23a35b40d712616e1042.exe 2960 f133b82450530c055ce9b53984260eb4b9018614542d23a35b40d712616e1042.exe 2960 f133b82450530c055ce9b53984260eb4b9018614542d23a35b40d712616e1042.exe 2960 f133b82450530c055ce9b53984260eb4b9018614542d23a35b40d712616e1042.exe 2960 f133b82450530c055ce9b53984260eb4b9018614542d23a35b40d712616e1042.exe 2960 f133b82450530c055ce9b53984260eb4b9018614542d23a35b40d712616e1042.exe 2960 f133b82450530c055ce9b53984260eb4b9018614542d23a35b40d712616e1042.exe 2960 f133b82450530c055ce9b53984260eb4b9018614542d23a35b40d712616e1042.exe 2960 f133b82450530c055ce9b53984260eb4b9018614542d23a35b40d712616e1042.exe 2960 f133b82450530c055ce9b53984260eb4b9018614542d23a35b40d712616e1042.exe 2960 f133b82450530c055ce9b53984260eb4b9018614542d23a35b40d712616e1042.exe 2960 f133b82450530c055ce9b53984260eb4b9018614542d23a35b40d712616e1042.exe 2960 f133b82450530c055ce9b53984260eb4b9018614542d23a35b40d712616e1042.exe 2960 f133b82450530c055ce9b53984260eb4b9018614542d23a35b40d712616e1042.exe 2960 f133b82450530c055ce9b53984260eb4b9018614542d23a35b40d712616e1042.exe