Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
150s -
max time network
155s -
platform
windows7_x64 -
resource
win7-20220901-en -
resource tags
arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system -
submitted
30/10/2022, 15:58
Static task
static1
Behavioral task
behavioral1
Sample
510a85f2a52b590eaf8dab23544efae31b3bb3c7aa440705dbf515d9f87b7718.exe
Resource
win7-20220901-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
510a85f2a52b590eaf8dab23544efae31b3bb3c7aa440705dbf515d9f87b7718.exe
Resource
win10v2004-20220812-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
510a85f2a52b590eaf8dab23544efae31b3bb3c7aa440705dbf515d9f87b7718.exe
-
Size
60KB
-
MD5
82ad3f011371238a88c9235420362211
-
SHA1
922ed87e0b888794b23899112e15f6d180ff545b
-
SHA256
510a85f2a52b590eaf8dab23544efae31b3bb3c7aa440705dbf515d9f87b7718
-
SHA512
7a326a66a262b1d79e6c645559bf4621f4648c213f3231e443ddcf2279c6f6baadf5452f0cc93cfa71644f9cf405e6d6521fd984c1ca5aeef969c33501025449
-
SSDEEP
1536:YJkK+YAhLTdlG4q8bo4bOm2Ll/F2b3yryUY:YJkTY+lG4qeXbYLv2byY
Score
6/10
Malware Config
Signatures
-
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 1464 510a85f2a52b590eaf8dab23544efae31b3bb3c7aa440705dbf515d9f87b7718.exe 1464 510a85f2a52b590eaf8dab23544efae31b3bb3c7aa440705dbf515d9f87b7718.exe 1464 510a85f2a52b590eaf8dab23544efae31b3bb3c7aa440705dbf515d9f87b7718.exe 1464 510a85f2a52b590eaf8dab23544efae31b3bb3c7aa440705dbf515d9f87b7718.exe 1464 510a85f2a52b590eaf8dab23544efae31b3bb3c7aa440705dbf515d9f87b7718.exe 1464 510a85f2a52b590eaf8dab23544efae31b3bb3c7aa440705dbf515d9f87b7718.exe 1464 510a85f2a52b590eaf8dab23544efae31b3bb3c7aa440705dbf515d9f87b7718.exe 1464 510a85f2a52b590eaf8dab23544efae31b3bb3c7aa440705dbf515d9f87b7718.exe 1464 510a85f2a52b590eaf8dab23544efae31b3bb3c7aa440705dbf515d9f87b7718.exe 1464 510a85f2a52b590eaf8dab23544efae31b3bb3c7aa440705dbf515d9f87b7718.exe 1464 510a85f2a52b590eaf8dab23544efae31b3bb3c7aa440705dbf515d9f87b7718.exe 1464 510a85f2a52b590eaf8dab23544efae31b3bb3c7aa440705dbf515d9f87b7718.exe 1464 510a85f2a52b590eaf8dab23544efae31b3bb3c7aa440705dbf515d9f87b7718.exe 1464 510a85f2a52b590eaf8dab23544efae31b3bb3c7aa440705dbf515d9f87b7718.exe 1464 510a85f2a52b590eaf8dab23544efae31b3bb3c7aa440705dbf515d9f87b7718.exe 1464 510a85f2a52b590eaf8dab23544efae31b3bb3c7aa440705dbf515d9f87b7718.exe 1464 510a85f2a52b590eaf8dab23544efae31b3bb3c7aa440705dbf515d9f87b7718.exe 1464 510a85f2a52b590eaf8dab23544efae31b3bb3c7aa440705dbf515d9f87b7718.exe 1464 510a85f2a52b590eaf8dab23544efae31b3bb3c7aa440705dbf515d9f87b7718.exe 1464 510a85f2a52b590eaf8dab23544efae31b3bb3c7aa440705dbf515d9f87b7718.exe 1464 510a85f2a52b590eaf8dab23544efae31b3bb3c7aa440705dbf515d9f87b7718.exe 1464 510a85f2a52b590eaf8dab23544efae31b3bb3c7aa440705dbf515d9f87b7718.exe 1464 510a85f2a52b590eaf8dab23544efae31b3bb3c7aa440705dbf515d9f87b7718.exe 1464 510a85f2a52b590eaf8dab23544efae31b3bb3c7aa440705dbf515d9f87b7718.exe 1464 510a85f2a52b590eaf8dab23544efae31b3bb3c7aa440705dbf515d9f87b7718.exe 1464 510a85f2a52b590eaf8dab23544efae31b3bb3c7aa440705dbf515d9f87b7718.exe 1464 510a85f2a52b590eaf8dab23544efae31b3bb3c7aa440705dbf515d9f87b7718.exe 1464 510a85f2a52b590eaf8dab23544efae31b3bb3c7aa440705dbf515d9f87b7718.exe 1464 510a85f2a52b590eaf8dab23544efae31b3bb3c7aa440705dbf515d9f87b7718.exe 1464 510a85f2a52b590eaf8dab23544efae31b3bb3c7aa440705dbf515d9f87b7718.exe 1464 510a85f2a52b590eaf8dab23544efae31b3bb3c7aa440705dbf515d9f87b7718.exe 1464 510a85f2a52b590eaf8dab23544efae31b3bb3c7aa440705dbf515d9f87b7718.exe 1464 510a85f2a52b590eaf8dab23544efae31b3bb3c7aa440705dbf515d9f87b7718.exe 1464 510a85f2a52b590eaf8dab23544efae31b3bb3c7aa440705dbf515d9f87b7718.exe 1464 510a85f2a52b590eaf8dab23544efae31b3bb3c7aa440705dbf515d9f87b7718.exe 1464 510a85f2a52b590eaf8dab23544efae31b3bb3c7aa440705dbf515d9f87b7718.exe 1464 510a85f2a52b590eaf8dab23544efae31b3bb3c7aa440705dbf515d9f87b7718.exe 1464 510a85f2a52b590eaf8dab23544efae31b3bb3c7aa440705dbf515d9f87b7718.exe 1464 510a85f2a52b590eaf8dab23544efae31b3bb3c7aa440705dbf515d9f87b7718.exe 1464 510a85f2a52b590eaf8dab23544efae31b3bb3c7aa440705dbf515d9f87b7718.exe 1464 510a85f2a52b590eaf8dab23544efae31b3bb3c7aa440705dbf515d9f87b7718.exe 1464 510a85f2a52b590eaf8dab23544efae31b3bb3c7aa440705dbf515d9f87b7718.exe 1464 510a85f2a52b590eaf8dab23544efae31b3bb3c7aa440705dbf515d9f87b7718.exe 1464 510a85f2a52b590eaf8dab23544efae31b3bb3c7aa440705dbf515d9f87b7718.exe 1464 510a85f2a52b590eaf8dab23544efae31b3bb3c7aa440705dbf515d9f87b7718.exe 1464 510a85f2a52b590eaf8dab23544efae31b3bb3c7aa440705dbf515d9f87b7718.exe 1464 510a85f2a52b590eaf8dab23544efae31b3bb3c7aa440705dbf515d9f87b7718.exe 1464 510a85f2a52b590eaf8dab23544efae31b3bb3c7aa440705dbf515d9f87b7718.exe 1464 510a85f2a52b590eaf8dab23544efae31b3bb3c7aa440705dbf515d9f87b7718.exe 1464 510a85f2a52b590eaf8dab23544efae31b3bb3c7aa440705dbf515d9f87b7718.exe 1464 510a85f2a52b590eaf8dab23544efae31b3bb3c7aa440705dbf515d9f87b7718.exe 1464 510a85f2a52b590eaf8dab23544efae31b3bb3c7aa440705dbf515d9f87b7718.exe 1464 510a85f2a52b590eaf8dab23544efae31b3bb3c7aa440705dbf515d9f87b7718.exe 1464 510a85f2a52b590eaf8dab23544efae31b3bb3c7aa440705dbf515d9f87b7718.exe 1464 510a85f2a52b590eaf8dab23544efae31b3bb3c7aa440705dbf515d9f87b7718.exe 1464 510a85f2a52b590eaf8dab23544efae31b3bb3c7aa440705dbf515d9f87b7718.exe 1464 510a85f2a52b590eaf8dab23544efae31b3bb3c7aa440705dbf515d9f87b7718.exe 1464 510a85f2a52b590eaf8dab23544efae31b3bb3c7aa440705dbf515d9f87b7718.exe 1464 510a85f2a52b590eaf8dab23544efae31b3bb3c7aa440705dbf515d9f87b7718.exe 1464 510a85f2a52b590eaf8dab23544efae31b3bb3c7aa440705dbf515d9f87b7718.exe 1464 510a85f2a52b590eaf8dab23544efae31b3bb3c7aa440705dbf515d9f87b7718.exe 1464 510a85f2a52b590eaf8dab23544efae31b3bb3c7aa440705dbf515d9f87b7718.exe 1464 510a85f2a52b590eaf8dab23544efae31b3bb3c7aa440705dbf515d9f87b7718.exe 1464 510a85f2a52b590eaf8dab23544efae31b3bb3c7aa440705dbf515d9f87b7718.exe -
Suspicious use of UnmapMainImage 1 IoCs
pid Process 1464 510a85f2a52b590eaf8dab23544efae31b3bb3c7aa440705dbf515d9f87b7718.exe