Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
152s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
07/11/2022, 13:19
Static task
static1
Behavioral task
behavioral1
Sample
fe6ba96604b299ef5bcec751aec29362f649a0fdf6291534d48184117f24b05e.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
fe6ba96604b299ef5bcec751aec29362f649a0fdf6291534d48184117f24b05e.exe
Resource
win10v2004-20220812-en
General
-
Target
fe6ba96604b299ef5bcec751aec29362f649a0fdf6291534d48184117f24b05e.exe
-
Size
44KB
-
MD5
ab0f795a828c9b3eb8b597c17cc6913f
-
SHA1
a19a0539a91d0f97bbfd6275a9b048aed41c901c
-
SHA256
fe6ba96604b299ef5bcec751aec29362f649a0fdf6291534d48184117f24b05e
-
SHA512
4f093036fbe00835db5b5edb125a68fa9c5c0fca5b4eb1c6c58deaafa11c3e3787fe6403d467c4a0b73307ec03deed6c26ccb9490d0a82e664e691222453d24d
-
SSDEEP
384:GBt7Br5xjL9A7AgA71FbhvxRPs689l89TcbMn8gdcbMn8gQYp/pwsfw:W7BlphA7pARFbhbs68/8cYp/pwsfw
Malware Config
Signatures
-
Drops file in Program Files directory 64 IoCs
description ioc Process File created C:\Program Files\Common Files\System\it-IT\wab32res.dll.mui.tmp fe6ba96604b299ef5bcec751aec29362f649a0fdf6291534d48184117f24b05e.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\rarrow.gif.tmp fe6ba96604b299ef5bcec751aec29362f649a0fdf6291534d48184117f24b05e.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.apache.httpcomponents.httpcore_4.2.5.v201311072007.jar.tmp fe6ba96604b299ef5bcec751aec29362f649a0fdf6291534d48184117f24b05e.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.ui.workbench_1.2.1.v20140901-1244.jar.tmp fe6ba96604b299ef5bcec751aec29362f649a0fdf6291534d48184117f24b05e.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.swt.win32.win32.x86_64_3.103.1.v20140903-1947.jar.tmp fe6ba96604b299ef5bcec751aec29362f649a0fdf6291534d48184117f24b05e.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.nl_ja_4.4.0.v20140623020002.jar.tmp fe6ba96604b299ef5bcec751aec29362f649a0fdf6291534d48184117f24b05e.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.ui.sdk.scheduler_1.2.0.v20140422-1847.jar.tmp fe6ba96604b299ef5bcec751aec29362f649a0fdf6291534d48184117f24b05e.exe File created C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\keypad\ea.xml.tmp fe6ba96604b299ef5bcec751aec29362f649a0fdf6291534d48184117f24b05e.exe File created C:\Program Files\Common Files\System\Ole DB\de-DE\sqloledb.rll.mui.tmp fe6ba96604b299ef5bcec751aec29362f649a0fdf6291534d48184117f24b05e.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\etc\visualvm.clusters.tmp fe6ba96604b299ef5bcec751aec29362f649a0fdf6291534d48184117f24b05e.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-netbeans-modules-keyring-fallback.xml.tmp fe6ba96604b299ef5bcec751aec29362f649a0fdf6291534d48184117f24b05e.exe File created C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.zh-tw.dll.tmp fe6ba96604b299ef5bcec751aec29362f649a0fdf6291534d48184117f24b05e.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.apache.lucene.core_3.5.0.v20120725-1805.jar.tmp fe6ba96604b299ef5bcec751aec29362f649a0fdf6291534d48184117f24b05e.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\lib\boot.jar.tmp fe6ba96604b299ef5bcec751aec29362f649a0fdf6291534d48184117f24b05e.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.ui.bindings.nl_ja_4.4.0.v20140623020002.jar.tmp fe6ba96604b299ef5bcec751aec29362f649a0fdf6291534d48184117f24b05e.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.launcher.win32.win32.x86_64.nl_ja_4.4.0.v20140623020002.jar.tmp fe6ba96604b299ef5bcec751aec29362f649a0fdf6291534d48184117f24b05e.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.operations.nl_ja_4.4.0.v20140623020002.jar.tmp fe6ba96604b299ef5bcec751aec29362f649a0fdf6291534d48184117f24b05e.exe File created C:\Program Files\7-Zip\Lang\ka.txt.tmp fe6ba96604b299ef5bcec751aec29362f649a0fdf6291534d48184117f24b05e.exe File created C:\Program Files\Google\Chrome\Application\89.0.4389.114\notification_helper.exe.tmp fe6ba96604b299ef5bcec751aec29362f649a0fdf6291534d48184117f24b05e.exe File created C:\Program Files\Java\jdk1.8.0_66\jre\THIRDPARTYLICENSEREADME-JAVAFX.txt.tmp fe6ba96604b299ef5bcec751aec29362f649a0fdf6291534d48184117f24b05e.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\.lastModified.tmp fe6ba96604b299ef5bcec751aec29362f649a0fdf6291534d48184117f24b05e.exe File created C:\Program Files\Common Files\microsoft shared\ink\fr-FR\tipresx.dll.mui.tmp fe6ba96604b299ef5bcec751aec29362f649a0fdf6291534d48184117f24b05e.exe File created C:\Program Files\Java\jdk1.8.0_66\bin\tnameserv.exe.tmp fe6ba96604b299ef5bcec751aec29362f649a0fdf6291534d48184117f24b05e.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.metadata.repository.nl_ja_4.4.0.v20140623020002.jar.tmp fe6ba96604b299ef5bcec751aec29362f649a0fdf6291534d48184117f24b05e.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.swt.nl_ja_4.4.0.v20140623020002.jar.tmp fe6ba96604b299ef5bcec751aec29362f649a0fdf6291534d48184117f24b05e.exe File created C:\Program Files\Common Files\microsoft shared\ink\sv-SE\tipresx.dll.mui.tmp fe6ba96604b299ef5bcec751aec29362f649a0fdf6291534d48184117f24b05e.exe File created C:\Program Files\Java\jdk1.8.0_66\jre\lib\security\trusted.libraries.tmp fe6ba96604b299ef5bcec751aec29362f649a0fdf6291534d48184117f24b05e.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.equinox.p2.core.feature_1.3.0.v20140523-0116\META-INF\MANIFEST.MF.tmp fe6ba96604b299ef5bcec751aec29362f649a0fdf6291534d48184117f24b05e.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.core.databinding.beans.nl_zh_4.4.0.v20140623020002.jar.tmp fe6ba96604b299ef5bcec751aec29362f649a0fdf6291534d48184117f24b05e.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.engine.nl_zh_4.4.0.v20140623020002.jar.tmp fe6ba96604b299ef5bcec751aec29362f649a0fdf6291534d48184117f24b05e.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.util_1.0.500.v20130404-1337.jar.tmp fe6ba96604b299ef5bcec751aec29362f649a0fdf6291534d48184117f24b05e.exe File created C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-utility-l1-1-0.dll.tmp fe6ba96604b299ef5bcec751aec29362f649a0fdf6291534d48184117f24b05e.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\dropins\README.TXT.tmp fe6ba96604b299ef5bcec751aec29362f649a0fdf6291534d48184117f24b05e.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.rcp_4.4.0.v20141007-2301\epl-v10.html.tmp fe6ba96604b299ef5bcec751aec29362f649a0fdf6291534d48184117f24b05e.exe File created C:\Program Files\Common Files\microsoft shared\ClickToRun\AppvIsvSubsystems32.dll.tmp fe6ba96604b299ef5bcec751aec29362f649a0fdf6291534d48184117f24b05e.exe File created C:\Program Files\Java\jdk1.8.0_66\jre\lib\fonts\LucidaBrightRegular.ttf.tmp fe6ba96604b299ef5bcec751aec29362f649a0fdf6291534d48184117f24b05e.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-netbeans-modules-masterfs-nio2.xml.tmp fe6ba96604b299ef5bcec751aec29362f649a0fdf6291534d48184117f24b05e.exe File created C:\Program Files\Java\jdk1.8.0_66\jre\lib\deploy\messages_ja.properties.tmp fe6ba96604b299ef5bcec751aec29362f649a0fdf6291534d48184117f24b05e.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.emf.ecore_2.10.1.v20140901-1043\META-INF\ECLIPSE_.RSA.tmp fe6ba96604b299ef5bcec751aec29362f649a0fdf6291534d48184117f24b05e.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\ModuleAutoDeps\org-openide-modules.xml.tmp fe6ba96604b299ef5bcec751aec29362f649a0fdf6291534d48184117f24b05e.exe File created C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.sv-se.dll.tmp fe6ba96604b299ef5bcec751aec29362f649a0fdf6291534d48184117f24b05e.exe File created C:\Program Files\Google\Chrome\Application\89.0.4389.114\Locales\hu.pak.tmp fe6ba96604b299ef5bcec751aec29362f649a0fdf6291534d48184117f24b05e.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.equinox.p2.core.feature_1.3.0.v20140523-0116\license.html.tmp fe6ba96604b299ef5bcec751aec29362f649a0fdf6291534d48184117f24b05e.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.rcp.intro_5.5.0.165303.jar.tmp fe6ba96604b299ef5bcec751aec29362f649a0fdf6291534d48184117f24b05e.exe File created C:\Program Files\7-Zip\7-zip.dll.tmp fe6ba96604b299ef5bcec751aec29362f649a0fdf6291534d48184117f24b05e.exe File created C:\Program Files\Java\jdk1.8.0_66\jre\bin\eula.dll.tmp fe6ba96604b299ef5bcec751aec29362f649a0fdf6291534d48184117f24b05e.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\config\Modules\org-openide-execution.xml.tmp fe6ba96604b299ef5bcec751aec29362f649a0fdf6291534d48184117f24b05e.exe File created C:\Program Files\Common Files\microsoft shared\ink\ipsdeu.xml.tmp fe6ba96604b299ef5bcec751aec29362f649a0fdf6291534d48184117f24b05e.exe File created C:\Program Files\Google\Chrome\Application\89.0.4389.114\chrome_pwa_launcher.exe.tmp fe6ba96604b299ef5bcec751aec29362f649a0fdf6291534d48184117f24b05e.exe File created C:\Program Files\Google\Chrome\Application\89.0.4389.114\mojo_core.dll.tmp fe6ba96604b299ef5bcec751aec29362f649a0fdf6291534d48184117f24b05e.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.ui.views.nl_zh_4.4.0.v20140623020002.jar.tmp fe6ba96604b299ef5bcec751aec29362f649a0fdf6291534d48184117f24b05e.exe File created C:\Program Files\ConvertStart.iso.tmp fe6ba96604b299ef5bcec751aec29362f649a0fdf6291534d48184117f24b05e.exe File created C:\Program Files\Java\jdk1.8.0_66\jre\lib\fonts\LucidaBrightItalic.ttf.tmp fe6ba96604b299ef5bcec751aec29362f649a0fdf6291534d48184117f24b05e.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.mbeanbrowser.zh_CN_5.5.0.165303.jar.tmp fe6ba96604b299ef5bcec751aec29362f649a0fdf6291534d48184117f24b05e.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\rjmx.jar.tmp fe6ba96604b299ef5bcec751aec29362f649a0fdf6291534d48184117f24b05e.exe File created C:\Program Files\Common Files\System\ado\msador15.dll.tmp fe6ba96604b299ef5bcec751aec29362f649a0fdf6291534d48184117f24b05e.exe File created C:\Program Files\Common Files\System\Ole DB\ja-JP\msdasqlr.dll.mui.tmp fe6ba96604b299ef5bcec751aec29362f649a0fdf6291534d48184117f24b05e.exe File created C:\Program Files\Google\Chrome\Application\89.0.4389.114\Locales\de.pak.tmp fe6ba96604b299ef5bcec751aec29362f649a0fdf6291534d48184117f24b05e.exe File created C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.emf.ecore.change_2.10.0.v20140901-1043.jar.tmp fe6ba96604b299ef5bcec751aec29362f649a0fdf6291534d48184117f24b05e.exe File created C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.et-ee.dll.tmp fe6ba96604b299ef5bcec751aec29362f649a0fdf6291534d48184117f24b05e.exe File created C:\Program Files\Common Files\microsoft shared\ink\it-IT\TipTsf.dll.mui.tmp fe6ba96604b299ef5bcec751aec29362f649a0fdf6291534d48184117f24b05e.exe File created C:\Program Files\Common Files\System\Ole DB\msdatl3.dll.tmp fe6ba96604b299ef5bcec751aec29362f649a0fdf6291534d48184117f24b05e.exe File created C:\Program Files\Google\Chrome\Application\89.0.4389.114\VisualElements\SmallLogoCanary.png.tmp fe6ba96604b299ef5bcec751aec29362f649a0fdf6291534d48184117f24b05e.exe File created C:\Program Files\Java\jdk1.8.0_66\jre\lib\fonts\LucidaSansRegular.ttf.tmp fe6ba96604b299ef5bcec751aec29362f649a0fdf6291534d48184117f24b05e.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
44KB
MD570eefdeb393edd25451d659e02d6cc14
SHA14924da234464368d21ee7bff9d00b92b0e7be87a
SHA25683abcd3172aceeba8f4186a1056a131b7f32c9b9bf200af081dc862a1632586b
SHA512c9a0b0e4177a5b8ec161dd488e5fcfa40021b136160bca9ed4fb8471f3a05cd82b3e7c9cc3325f839159dc4c04a3edad076777458c6961c815638bf9127ce2f8