Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
87s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
30/10/2022, 09:59
Behavioral task
behavioral1
Sample
c694181558385e8e0ea90dc36b06e563baf129d8c15cfb49e0edb5b027f5fdcb.exe
Resource
win7-20220901-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
c694181558385e8e0ea90dc36b06e563baf129d8c15cfb49e0edb5b027f5fdcb.exe
Resource
win10v2004-20220812-en
windows10-2004-x64
3 signatures
150 seconds
General
-
Target
c694181558385e8e0ea90dc36b06e563baf129d8c15cfb49e0edb5b027f5fdcb.exe
-
Size
72KB
-
MD5
a300cbbf45f0e6d22a4a9807447b7aa0
-
SHA1
e2fb2609fd5c3137c8fdc33fe715d279ce78e5ac
-
SHA256
c694181558385e8e0ea90dc36b06e563baf129d8c15cfb49e0edb5b027f5fdcb
-
SHA512
15e1352d8f80d1660d7a475bfafbc646b2687c8deb31a6340965e4a387f3916079615cdca8fc0cce166907079587258ce19c91bcde7588929504a7c9179d439f
-
SSDEEP
1536:5lrsicagdzn8K2ariPOcjk+XQuPVN72NMSQApQY:5JjcF8KfCOcjk+guPVjSQApQY
Score
8/10
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/2104-132-0x0000000000400000-0x0000000000467000-memory.dmp upx behavioral2/memory/2104-133-0x0000000000400000-0x0000000000467000-memory.dmp upx -
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\winxcfg.exe = "C:\\Windows\\system32\\winxcfg.exe" c694181558385e8e0ea90dc36b06e563baf129d8c15cfb49e0edb5b027f5fdcb.exe -
Drops file in System32 directory 33 IoCs
description ioc Process File created C:\Windows\SysWOW64\macromd\cute blonde cheerleader dancing.mpg.pif c694181558385e8e0ea90dc36b06e563baf129d8c15cfb49e0edb5b027f5fdcb.exe File created C:\Windows\SysWOW64\winxcfg.exe c694181558385e8e0ea90dc36b06e563baf129d8c15cfb49e0edb5b027f5fdcb.exe File created C:\Windows\SysWOW64\macromd\cute girl giving head.exe c694181558385e8e0ea90dc36b06e563baf129d8c15cfb49e0edb5b027f5fdcb.exe File created C:\Windows\SysWOW64\macromd\Warcraft 3 battle.net serial generator.exe c694181558385e8e0ea90dc36b06e563baf129d8c15cfb49e0edb5b027f5fdcb.exe File created C:\Windows\SysWOW64\macromd\aimcracker.exe c694181558385e8e0ea90dc36b06e563baf129d8c15cfb49e0edb5b027f5fdcb.exe File created C:\Windows\SysWOW64\macromd\honies with incredibly delicious big boobs.mpg.pif c694181558385e8e0ea90dc36b06e563baf129d8c15cfb49e0edb5b027f5fdcb.exe File created C:\Windows\SysWOW64\macromd\hot girl on the beach sucking cock and fucking guy.mpg.exe c694181558385e8e0ea90dc36b06e563baf129d8c15cfb49e0edb5b027f5fdcb.exe File created C:\Windows\SysWOW64\macromd\siemens unlocker.exe c694181558385e8e0ea90dc36b06e563baf129d8c15cfb49e0edb5b027f5fdcb.exe File created C:\Windows\SysWOW64\macromd\Microsoft Office XP (english) key generator.exe c694181558385e8e0ea90dc36b06e563baf129d8c15cfb49e0edb5b027f5fdcb.exe File created C:\Windows\SysWOW64\macromd\aimhacker.exe c694181558385e8e0ea90dc36b06e563baf129d8c15cfb49e0edb5b027f5fdcb.exe File created C:\Windows\SysWOW64\macromd\Harry Potter and the sorcerors stone.divx.exe c694181558385e8e0ea90dc36b06e563baf129d8c15cfb49e0edb5b027f5fdcb.exe File created C:\Windows\SysWOW64\macromd\12 year old forced rape cum.exe c694181558385e8e0ea90dc36b06e563baf129d8c15cfb49e0edb5b027f5fdcb.exe File created C:\Windows\SysWOW64\macromd\bad gal being tied and bound.mpg.pif c694181558385e8e0ea90dc36b06e563baf129d8c15cfb49e0edb5b027f5fdcb.exe File created C:\Windows\SysWOW64\macromd\sexy ass black slut sucking huge cock.mpg.pif c694181558385e8e0ea90dc36b06e563baf129d8c15cfb49e0edb5b027f5fdcb.exe File created C:\Windows\SysWOW64\macromd\porn account cracker.exe c694181558385e8e0ea90dc36b06e563baf129d8c15cfb49e0edb5b027f5fdcb.exe File created C:\Windows\SysWOW64\macromd\Xbox Iso 2 Rom Converter.exe c694181558385e8e0ea90dc36b06e563baf129d8c15cfb49e0edb5b027f5fdcb.exe File created C:\Windows\SysWOW64\macromd\brunette fucking in bedroom with boyfriend.mpg.pif c694181558385e8e0ea90dc36b06e563baf129d8c15cfb49e0edb5b027f5fdcb.exe File created C:\Windows\SysWOW64\macromd\sluty cock sucking chick.mpg.pif c694181558385e8e0ea90dc36b06e563baf129d8c15cfb49e0edb5b027f5fdcb.exe File created C:\Windows\SysWOW64\macromd\firm ass honie with thick lips made for sucking rods.mpg.pif c694181558385e8e0ea90dc36b06e563baf129d8c15cfb49e0edb5b027f5fdcb.exe File created C:\Windows\SysWOW64\macromd\hard 3 way fuck in car shop.mpg.pif c694181558385e8e0ea90dc36b06e563baf129d8c15cfb49e0edb5b027f5fdcb.exe File created C:\Windows\SysWOW64\macromd\super sexy blonde showing her pink.mpg.pif c694181558385e8e0ea90dc36b06e563baf129d8c15cfb49e0edb5b027f5fdcb.exe File created C:\Windows\SysWOW64\macromd\toying blonde with fucking machine.mpg.pif c694181558385e8e0ea90dc36b06e563baf129d8c15cfb49e0edb5b027f5fdcb.exe File created C:\Windows\SysWOW64\macromd\shanks who serve up smelly pootang.mpg.pif c694181558385e8e0ea90dc36b06e563baf129d8c15cfb49e0edb5b027f5fdcb.exe File created C:\Windows\SysWOW64\macromd\msncracker.exe c694181558385e8e0ea90dc36b06e563baf129d8c15cfb49e0edb5b027f5fdcb.exe File created C:\Windows\SysWOW64\macromd\cute petite amateur girl spreading her snatch.mpg.pif c694181558385e8e0ea90dc36b06e563baf129d8c15cfb49e0edb5b027f5fdcb.exe File created C:\Windows\SysWOW64\macromd\yummy lesbos licking wet pussy holes.mpg.pif c694181558385e8e0ea90dc36b06e563baf129d8c15cfb49e0edb5b027f5fdcb.exe File created C:\Windows\SysWOW64\macromd\babes with an assortment of delicious big juggs.mpg.pif c694181558385e8e0ea90dc36b06e563baf129d8c15cfb49e0edb5b027f5fdcb.exe File created C:\Windows\SysWOW64\macromd\Grand theft auto 3 CD1 crack.exe c694181558385e8e0ea90dc36b06e563baf129d8c15cfb49e0edb5b027f5fdcb.exe File created C:\Windows\SysWOW64\macromd\wife in kitchen preparing hot pussy for hubby's dinner.mpg.pif c694181558385e8e0ea90dc36b06e563baf129d8c15cfb49e0edb5b027f5fdcb.exe File created C:\Windows\SysWOW64\macromd\teen with her legs wide and fingers in her wet cunt.mpg.pif c694181558385e8e0ea90dc36b06e563baf129d8c15cfb49e0edb5b027f5fdcb.exe File created C:\Windows\SysWOW64\macromd\DivX pro key generator.exe c694181558385e8e0ea90dc36b06e563baf129d8c15cfb49e0edb5b027f5fdcb.exe File created C:\Windows\SysWOW64\macromd\movie of mom who whip hot ass on daughter's big cock lover.mpg.pif c694181558385e8e0ea90dc36b06e563baf129d8c15cfb49e0edb5b027f5fdcb.exe File created C:\Windows\SysWOW64\macromd\honies letting dudes flush mouths full of hot cum.mpg.pif c694181558385e8e0ea90dc36b06e563baf129d8c15cfb49e0edb5b027f5fdcb.exe