Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
45s -
max time network
48s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
30/10/2022, 10:01 UTC
Behavioral task
behavioral1
Sample
809829ea7be68106d4e4b9829d81063ad71a9c0a064688570818fa4b17c135e0.exe
Resource
win7-20220812-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
809829ea7be68106d4e4b9829d81063ad71a9c0a064688570818fa4b17c135e0.exe
Resource
win10v2004-20220812-en
windows10-2004-x64
3 signatures
150 seconds
General
-
Target
809829ea7be68106d4e4b9829d81063ad71a9c0a064688570818fa4b17c135e0.exe
-
Size
70KB
-
MD5
83c3706e3650a4ec89d88998e2517ae1
-
SHA1
b9aa52662ba098cbc222e07e34529a7c517bf53d
-
SHA256
809829ea7be68106d4e4b9829d81063ad71a9c0a064688570818fa4b17c135e0
-
SHA512
cd5025ba55ea8cdc501fbe34239c602e2b203c9fe1e9a810423f77d6c7f155b18b3ce358672c957a35c67110e49e0f77b39490189fe827d2e4472b0343e8068f
-
SSDEEP
1536:5lrsicagdzn8K2ariPOcjk+XQuPVN72NMSFUglOCU:5JjcF8KfCOcjk+guPVjSFUglOCU
Score
8/10
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/536-54-0x0000000000400000-0x0000000000467000-memory.dmp upx behavioral1/memory/536-55-0x0000000000400000-0x0000000000467000-memory.dmp upx -
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\winxcfg.exe = "C:\\Windows\\system32\\winxcfg.exe" 809829ea7be68106d4e4b9829d81063ad71a9c0a064688570818fa4b17c135e0.exe -
Drops file in System32 directory 33 IoCs
description ioc Process File created C:\Windows\SysWOW64\macromd\hotties sucking boobs and eating snatch in large bed.mpg.pif 809829ea7be68106d4e4b9829d81063ad71a9c0a064688570818fa4b17c135e0.exe File created C:\Windows\SysWOW64\macromd\amateur slut fingering herself threw her wet panties.mpg.pif 809829ea7be68106d4e4b9829d81063ad71a9c0a064688570818fa4b17c135e0.exe File created C:\Windows\SysWOW64\macromd\hotmailhacker.exe 809829ea7be68106d4e4b9829d81063ad71a9c0a064688570818fa4b17c135e0.exe File created C:\Windows\SysWOW64\macromd\Napster Clone.exe 809829ea7be68106d4e4b9829d81063ad71a9c0a064688570818fa4b17c135e0.exe File created C:\Windows\SysWOW64\macromd\Jenna Jameson Nude Gang Bang Forced Cum Blowjob.mpg.pif 809829ea7be68106d4e4b9829d81063ad71a9c0a064688570818fa4b17c135e0.exe File created C:\Windows\SysWOW64\macromd\old fucker punishing teeny.mpg.pif 809829ea7be68106d4e4b9829d81063ad71a9c0a064688570818fa4b17c135e0.exe File created C:\Windows\SysWOW64\macromd\hot slut with a big dildo.mpg.pif 809829ea7be68106d4e4b9829d81063ad71a9c0a064688570818fa4b17c135e0.exe File created C:\Windows\SysWOW64\macromd\happy babe who got 12 inches last night.mpg.pif 809829ea7be68106d4e4b9829d81063ad71a9c0a064688570818fa4b17c135e0.exe File created C:\Windows\SysWOW64\macromd\chick weeing in her pants.mpg.pif 809829ea7be68106d4e4b9829d81063ad71a9c0a064688570818fa4b17c135e0.exe File created C:\Windows\SysWOW64\macromd\GTA 3 Serial.exe 809829ea7be68106d4e4b9829d81063ad71a9c0a064688570818fa4b17c135e0.exe File created C:\Windows\SysWOW64\macromd\Two girls - Blonde and Brunette - Giving head.exe 809829ea7be68106d4e4b9829d81063ad71a9c0a064688570818fa4b17c135e0.exe File created C:\Windows\SysWOW64\macromd\momma's juggs that make you scream for mercy.mpg.pif 809829ea7be68106d4e4b9829d81063ad71a9c0a064688570818fa4b17c135e0.exe File created C:\Windows\SysWOW64\macromd\yummy lesbos licking.mpg.pif 809829ea7be68106d4e4b9829d81063ad71a9c0a064688570818fa4b17c135e0.exe File created C:\Windows\SysWOW64\macromd\hot blonde teen sucking old dick.mpg.pif 809829ea7be68106d4e4b9829d81063ad71a9c0a064688570818fa4b17c135e0.exe File created C:\Windows\SysWOW64\macromd\icqcracker.exe 809829ea7be68106d4e4b9829d81063ad71a9c0a064688570818fa4b17c135e0.exe File created C:\Windows\SysWOW64\macromd\candy stripper getting down on sick mans cock.mpg.pif 809829ea7be68106d4e4b9829d81063ad71a9c0a064688570818fa4b17c135e0.exe File created C:\Windows\SysWOW64\macromd\strange asian ass odyssey.mpg.pif 809829ea7be68106d4e4b9829d81063ad71a9c0a064688570818fa4b17c135e0.exe File created C:\Windows\SysWOW64\winxcfg.exe 809829ea7be68106d4e4b9829d81063ad71a9c0a064688570818fa4b17c135e0.exe File created C:\Windows\SysWOW64\macromd\babes with oversized hooters spreading.mpg.pif 809829ea7be68106d4e4b9829d81063ad71a9c0a064688570818fa4b17c135e0.exe File created C:\Windows\SysWOW64\macromd\babes getting their tender little asses corked.mpg.pif 809829ea7be68106d4e4b9829d81063ad71a9c0a064688570818fa4b17c135e0.exe File created C:\Windows\SysWOW64\macromd\busty older bitch gets slammed.mpg.pif 809829ea7be68106d4e4b9829d81063ad71a9c0a064688570818fa4b17c135e0.exe File created C:\Windows\SysWOW64\macromd\amateur babe showing pink.mpg.pif 809829ea7be68106d4e4b9829d81063ad71a9c0a064688570818fa4b17c135e0.exe File created C:\Windows\SysWOW64\macromd\blonde showing her pussy to her neighbor.mpg.pif 809829ea7be68106d4e4b9829d81063ad71a9c0a064688570818fa4b17c135e0.exe File created C:\Windows\SysWOW64\macromd\babe doing boyfriend and his buddy.mpg.pif 809829ea7be68106d4e4b9829d81063ad71a9c0a064688570818fa4b17c135e0.exe File created C:\Windows\SysWOW64\macromd\girls with cock in hand and mouths fill with cum .mpg.pif 809829ea7be68106d4e4b9829d81063ad71a9c0a064688570818fa4b17c135e0.exe File created C:\Windows\SysWOW64\macromd\hot butt sex ..unbeliveable.mpg.pif 809829ea7be68106d4e4b9829d81063ad71a9c0a064688570818fa4b17c135e0.exe File created C:\Windows\SysWOW64\macromd\Counter Strike CD Keygen.exe 809829ea7be68106d4e4b9829d81063ad71a9c0a064688570818fa4b17c135e0.exe File created C:\Windows\SysWOW64\macromd\honie with thick ass spreading her money maker.mpg.pif 809829ea7be68106d4e4b9829d81063ad71a9c0a064688570818fa4b17c135e0.exe File created C:\Windows\SysWOW64\macromd\tiny little virgin showing off her cherry pussy.mpg.pif 809829ea7be68106d4e4b9829d81063ad71a9c0a064688570818fa4b17c135e0.exe File created C:\Windows\SysWOW64\macromd\babe locking lips around her man's rod in backyard.mpg.pif 809829ea7be68106d4e4b9829d81063ad71a9c0a064688570818fa4b17c135e0.exe File created C:\Windows\SysWOW64\macromd\hard 3 way fuck in car shop.mpg.pif 809829ea7be68106d4e4b9829d81063ad71a9c0a064688570818fa4b17c135e0.exe File created C:\Windows\SysWOW64\macromd\nurse in pink showing her healthy bone slot.mpg.pif 809829ea7be68106d4e4b9829d81063ad71a9c0a064688570818fa4b17c135e0.exe File created C:\Windows\SysWOW64\macromd\asian slut with puffy exotic lips.mpg.pif 809829ea7be68106d4e4b9829d81063ad71a9c0a064688570818fa4b17c135e0.exe