Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
136s -
max time network
178s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
29/10/2022, 21:23
Behavioral task
behavioral1
Sample
7bc80bcda343a754029b5d72b4ffaba18c828cec94077c5c61fd4b6ce2297708.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
7bc80bcda343a754029b5d72b4ffaba18c828cec94077c5c61fd4b6ce2297708.exe
Resource
win10v2004-20220812-en
General
-
Target
7bc80bcda343a754029b5d72b4ffaba18c828cec94077c5c61fd4b6ce2297708.exe
-
Size
81KB
-
MD5
a38e8d340674f0fa01435993adb37e70
-
SHA1
0b1d3d4946a8bdad3a4c9cfb3d2a3f101935b976
-
SHA256
7bc80bcda343a754029b5d72b4ffaba18c828cec94077c5c61fd4b6ce2297708
-
SHA512
78b23d37dbe6a669972855d9a53aa9ddc1c68069d65fe8c3e2481ff87f97cec79e5bf4ba2f69c2bc9e76b3013261ade111476f5ee4d0cd54c3e1e7ef593a1c8c
-
SSDEEP
1536:5lrsicagdzn8K2ariPOcjk+XQuPVN72NMSjA6OMOka:5JjcF8KfCOcjk+guPVjSM6fOL
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/3724-132-0x0000000000400000-0x0000000000467000-memory.dmp upx behavioral2/memory/3724-133-0x0000000000400000-0x0000000000467000-memory.dmp upx -
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\winxcfg.exe = "C:\\Windows\\system32\\winxcfg.exe" 7bc80bcda343a754029b5d72b4ffaba18c828cec94077c5c61fd4b6ce2297708.exe -
Drops file in System32 directory 33 IoCs
description ioc Process File created C:\Windows\SysWOW64\macromd\Grand theft auto 3 CD1 crack.exe 7bc80bcda343a754029b5d72b4ffaba18c828cec94077c5c61fd4b6ce2297708.exe File created C:\Windows\SysWOW64\macromd\AIM Account Stealer.exe 7bc80bcda343a754029b5d72b4ffaba18c828cec94077c5c61fd4b6ce2297708.exe File created C:\Windows\SysWOW64\macromd\cutie nailed up the ass.mpg.pif 7bc80bcda343a754029b5d72b4ffaba18c828cec94077c5c61fd4b6ce2297708.exe File created C:\Windows\SysWOW64\macromd\girls with cock in hand and mouths fill with cum .mpg.pif 7bc80bcda343a754029b5d72b4ffaba18c828cec94077c5c61fd4b6ce2297708.exe File created C:\Windows\SysWOW64\macromd\chick weeing in her pants.mpg.pif 7bc80bcda343a754029b5d72b4ffaba18c828cec94077c5c61fd4b6ce2297708.exe File created C:\Windows\SysWOW64\winxcfg.exe 7bc80bcda343a754029b5d72b4ffaba18c828cec94077c5c61fd4b6ce2297708.exe File created C:\Windows\SysWOW64\macromd\babe celebrating new years naked and spreading cunt.mpg.pif 7bc80bcda343a754029b5d72b4ffaba18c828cec94077c5c61fd4b6ce2297708.exe File created C:\Windows\SysWOW64\macromd\dedicated honie giving dude a helping hand and head.mpg.pif 7bc80bcda343a754029b5d72b4ffaba18c828cec94077c5c61fd4b6ce2297708.exe File created C:\Windows\SysWOW64\macromd\blonde on couch gettin tight anal fucking.mpg.pif 7bc80bcda343a754029b5d72b4ffaba18c828cec94077c5c61fd4b6ce2297708.exe File created C:\Windows\SysWOW64\macromd\babes with an assortment of delicious big juggs.mpg.pif 7bc80bcda343a754029b5d72b4ffaba18c828cec94077c5c61fd4b6ce2297708.exe File created C:\Windows\SysWOW64\macromd\senior blonde fucking and suckin like a teen.mpg.pif 7bc80bcda343a754029b5d72b4ffaba18c828cec94077c5c61fd4b6ce2297708.exe File created C:\Windows\SysWOW64\macromd\asian studys how to strip.mpg.pif 7bc80bcda343a754029b5d72b4ffaba18c828cec94077c5c61fd4b6ce2297708.exe File created C:\Windows\SysWOW64\macromd\hot slut with a big dildo.mpg.pif 7bc80bcda343a754029b5d72b4ffaba18c828cec94077c5c61fd4b6ce2297708.exe File created C:\Windows\SysWOW64\macromd\two hot college girl fucking in class.mpg.pif 7bc80bcda343a754029b5d72b4ffaba18c828cec94077c5c61fd4b6ce2297708.exe File created C:\Windows\SysWOW64\macromd\cum hungry teen in action.mpg.pif 7bc80bcda343a754029b5d72b4ffaba18c828cec94077c5c61fd4b6ce2297708.exe File created C:\Windows\SysWOW64\macromd\fetish bondage preteen porno.mpg.pif 7bc80bcda343a754029b5d72b4ffaba18c828cec94077c5c61fd4b6ce2297708.exe File created C:\Windows\SysWOW64\macromd\beautiful blonde gettin an anal fucking.mpg.pif 7bc80bcda343a754029b5d72b4ffaba18c828cec94077c5c61fd4b6ce2297708.exe File created C:\Windows\SysWOW64\macromd\robin throating and fucking.mpg.pif 7bc80bcda343a754029b5d72b4ffaba18c828cec94077c5c61fd4b6ce2297708.exe File created C:\Windows\SysWOW64\macromd\shanks who serve up smelly pootang.mpg.pif 7bc80bcda343a754029b5d72b4ffaba18c828cec94077c5c61fd4b6ce2297708.exe File created C:\Windows\SysWOW64\macromd\two dudes comparing dick sizes.mpg.pif 7bc80bcda343a754029b5d72b4ffaba18c828cec94077c5c61fd4b6ce2297708.exe File created C:\Windows\SysWOW64\macromd\young teen slut with a huge cock in her mouth.mpg.pif 7bc80bcda343a754029b5d72b4ffaba18c828cec94077c5c61fd4b6ce2297708.exe File created C:\Windows\SysWOW64\macromd\sexy blonde teasing pussy.mpg.pif 7bc80bcda343a754029b5d72b4ffaba18c828cec94077c5c61fd4b6ce2297708.exe File created C:\Windows\SysWOW64\macromd\teen taking off her panties outdoors.mpg.pif 7bc80bcda343a754029b5d72b4ffaba18c828cec94077c5c61fd4b6ce2297708.exe File created C:\Windows\SysWOW64\macromd\cute young tart on a lucky dudes cum shooter.mpg.pif 7bc80bcda343a754029b5d72b4ffaba18c828cec94077c5c61fd4b6ce2297708.exe File created C:\Windows\SysWOW64\macromd\babe leading pussy-whipped stud around by her cunt.mpg.pif 7bc80bcda343a754029b5d72b4ffaba18c828cec94077c5c61fd4b6ce2297708.exe File created C:\Windows\SysWOW64\macromd\hot blonde teen sucking old dick.mpg.pif 7bc80bcda343a754029b5d72b4ffaba18c828cec94077c5c61fd4b6ce2297708.exe File created C:\Windows\SysWOW64\macromd\virtua girl - adriana.pif 7bc80bcda343a754029b5d72b4ffaba18c828cec94077c5c61fd4b6ce2297708.exe File created C:\Windows\SysWOW64\macromd\movie of mom who whip hot ass on daughter's big cock lover.mpg.pif 7bc80bcda343a754029b5d72b4ffaba18c828cec94077c5c61fd4b6ce2297708.exe File created C:\Windows\SysWOW64\macromd\career girls playing with their snatch after work.mpg.pif 7bc80bcda343a754029b5d72b4ffaba18c828cec94077c5c61fd4b6ce2297708.exe File created C:\Windows\SysWOW64\macromd\young slut being pound in all her tight holes.mpg.pif 7bc80bcda343a754029b5d72b4ffaba18c828cec94077c5c61fd4b6ce2297708.exe File created C:\Windows\SysWOW64\macromd\babes getting big cocks off with lips.mpg.pif 7bc80bcda343a754029b5d72b4ffaba18c828cec94077c5c61fd4b6ce2297708.exe File created C:\Windows\SysWOW64\macromd\mature show older pussy and happy to do it.mpg.pif 7bc80bcda343a754029b5d72b4ffaba18c828cec94077c5c61fd4b6ce2297708.exe File created C:\Windows\SysWOW64\macromd\black girl gets dildo wet.mpg.pif 7bc80bcda343a754029b5d72b4ffaba18c828cec94077c5c61fd4b6ce2297708.exe