Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
197s -
max time network
199s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
29/11/2022, 04:52
Static task
static1
Behavioral task
behavioral1
Sample
97eb2f92345de32be22d589383580fb3bf9805a770bee7fa870d40cf24ab5e44.exe
Resource
win7-20221111-en
windows7-x64
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
97eb2f92345de32be22d589383580fb3bf9805a770bee7fa870d40cf24ab5e44.exe
Resource
win10v2004-20221111-en
windows10-2004-x64
3 signatures
150 seconds
General
-
Target
97eb2f92345de32be22d589383580fb3bf9805a770bee7fa870d40cf24ab5e44.exe
-
Size
342KB
-
MD5
ca87dace630db4a884520cd56e5ac303
-
SHA1
cfeafec4d6cb3f29e9063430077880c91b0dc441
-
SHA256
97eb2f92345de32be22d589383580fb3bf9805a770bee7fa870d40cf24ab5e44
-
SHA512
7b1d8ca265a9d8e28000f5d13312077f333ea1697b22c12761d70e405fbf7f8b419957a4dbaceecbf6f9df1a057b37fd44c15c6e2ed876e5deb19b86129a906f
-
SSDEEP
6144:hS+3aT6nBEKACdYKOB+/VtNZjuz4oK0dGaRB6dq3UsBtJM2ou+k7JfsNTgA6:hXaT+WKwBBktsK0dGK6gUl23+kFfokA6
Score
8/10
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/2236-133-0x0000000000400000-0x0000000000472000-memory.dmp upx behavioral2/memory/2236-134-0x0000000000400000-0x0000000000472000-memory.dmp upx behavioral2/memory/2236-135-0x0000000000400000-0x0000000000472000-memory.dmp upx -
Maps connected drives based on registry 3 TTPs 2 IoCs
Disk information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Disk\Enum 97eb2f92345de32be22d589383580fb3bf9805a770bee7fa870d40cf24ab5e44.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\disk\Enum\0 97eb2f92345de32be22d589383580fb3bf9805a770bee7fa870d40cf24ab5e44.exe -
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 2236 97eb2f92345de32be22d589383580fb3bf9805a770bee7fa870d40cf24ab5e44.exe 2236 97eb2f92345de32be22d589383580fb3bf9805a770bee7fa870d40cf24ab5e44.exe 2236 97eb2f92345de32be22d589383580fb3bf9805a770bee7fa870d40cf24ab5e44.exe 2236 97eb2f92345de32be22d589383580fb3bf9805a770bee7fa870d40cf24ab5e44.exe 2236 97eb2f92345de32be22d589383580fb3bf9805a770bee7fa870d40cf24ab5e44.exe 2236 97eb2f92345de32be22d589383580fb3bf9805a770bee7fa870d40cf24ab5e44.exe 2236 97eb2f92345de32be22d589383580fb3bf9805a770bee7fa870d40cf24ab5e44.exe 2236 97eb2f92345de32be22d589383580fb3bf9805a770bee7fa870d40cf24ab5e44.exe 2236 97eb2f92345de32be22d589383580fb3bf9805a770bee7fa870d40cf24ab5e44.exe 2236 97eb2f92345de32be22d589383580fb3bf9805a770bee7fa870d40cf24ab5e44.exe 2236 97eb2f92345de32be22d589383580fb3bf9805a770bee7fa870d40cf24ab5e44.exe 2236 97eb2f92345de32be22d589383580fb3bf9805a770bee7fa870d40cf24ab5e44.exe 2236 97eb2f92345de32be22d589383580fb3bf9805a770bee7fa870d40cf24ab5e44.exe 2236 97eb2f92345de32be22d589383580fb3bf9805a770bee7fa870d40cf24ab5e44.exe 2236 97eb2f92345de32be22d589383580fb3bf9805a770bee7fa870d40cf24ab5e44.exe 2236 97eb2f92345de32be22d589383580fb3bf9805a770bee7fa870d40cf24ab5e44.exe 2236 97eb2f92345de32be22d589383580fb3bf9805a770bee7fa870d40cf24ab5e44.exe 2236 97eb2f92345de32be22d589383580fb3bf9805a770bee7fa870d40cf24ab5e44.exe 2236 97eb2f92345de32be22d589383580fb3bf9805a770bee7fa870d40cf24ab5e44.exe 2236 97eb2f92345de32be22d589383580fb3bf9805a770bee7fa870d40cf24ab5e44.exe 2236 97eb2f92345de32be22d589383580fb3bf9805a770bee7fa870d40cf24ab5e44.exe 2236 97eb2f92345de32be22d589383580fb3bf9805a770bee7fa870d40cf24ab5e44.exe 2236 97eb2f92345de32be22d589383580fb3bf9805a770bee7fa870d40cf24ab5e44.exe 2236 97eb2f92345de32be22d589383580fb3bf9805a770bee7fa870d40cf24ab5e44.exe 2236 97eb2f92345de32be22d589383580fb3bf9805a770bee7fa870d40cf24ab5e44.exe 2236 97eb2f92345de32be22d589383580fb3bf9805a770bee7fa870d40cf24ab5e44.exe 2236 97eb2f92345de32be22d589383580fb3bf9805a770bee7fa870d40cf24ab5e44.exe 2236 97eb2f92345de32be22d589383580fb3bf9805a770bee7fa870d40cf24ab5e44.exe 2236 97eb2f92345de32be22d589383580fb3bf9805a770bee7fa870d40cf24ab5e44.exe 2236 97eb2f92345de32be22d589383580fb3bf9805a770bee7fa870d40cf24ab5e44.exe 2236 97eb2f92345de32be22d589383580fb3bf9805a770bee7fa870d40cf24ab5e44.exe 2236 97eb2f92345de32be22d589383580fb3bf9805a770bee7fa870d40cf24ab5e44.exe 2236 97eb2f92345de32be22d589383580fb3bf9805a770bee7fa870d40cf24ab5e44.exe 2236 97eb2f92345de32be22d589383580fb3bf9805a770bee7fa870d40cf24ab5e44.exe 2236 97eb2f92345de32be22d589383580fb3bf9805a770bee7fa870d40cf24ab5e44.exe 2236 97eb2f92345de32be22d589383580fb3bf9805a770bee7fa870d40cf24ab5e44.exe 2236 97eb2f92345de32be22d589383580fb3bf9805a770bee7fa870d40cf24ab5e44.exe 2236 97eb2f92345de32be22d589383580fb3bf9805a770bee7fa870d40cf24ab5e44.exe 2236 97eb2f92345de32be22d589383580fb3bf9805a770bee7fa870d40cf24ab5e44.exe 2236 97eb2f92345de32be22d589383580fb3bf9805a770bee7fa870d40cf24ab5e44.exe 2236 97eb2f92345de32be22d589383580fb3bf9805a770bee7fa870d40cf24ab5e44.exe 2236 97eb2f92345de32be22d589383580fb3bf9805a770bee7fa870d40cf24ab5e44.exe 2236 97eb2f92345de32be22d589383580fb3bf9805a770bee7fa870d40cf24ab5e44.exe 2236 97eb2f92345de32be22d589383580fb3bf9805a770bee7fa870d40cf24ab5e44.exe 2236 97eb2f92345de32be22d589383580fb3bf9805a770bee7fa870d40cf24ab5e44.exe 2236 97eb2f92345de32be22d589383580fb3bf9805a770bee7fa870d40cf24ab5e44.exe 2236 97eb2f92345de32be22d589383580fb3bf9805a770bee7fa870d40cf24ab5e44.exe 2236 97eb2f92345de32be22d589383580fb3bf9805a770bee7fa870d40cf24ab5e44.exe 2236 97eb2f92345de32be22d589383580fb3bf9805a770bee7fa870d40cf24ab5e44.exe 2236 97eb2f92345de32be22d589383580fb3bf9805a770bee7fa870d40cf24ab5e44.exe 2236 97eb2f92345de32be22d589383580fb3bf9805a770bee7fa870d40cf24ab5e44.exe 2236 97eb2f92345de32be22d589383580fb3bf9805a770bee7fa870d40cf24ab5e44.exe 2236 97eb2f92345de32be22d589383580fb3bf9805a770bee7fa870d40cf24ab5e44.exe 2236 97eb2f92345de32be22d589383580fb3bf9805a770bee7fa870d40cf24ab5e44.exe 2236 97eb2f92345de32be22d589383580fb3bf9805a770bee7fa870d40cf24ab5e44.exe 2236 97eb2f92345de32be22d589383580fb3bf9805a770bee7fa870d40cf24ab5e44.exe 2236 97eb2f92345de32be22d589383580fb3bf9805a770bee7fa870d40cf24ab5e44.exe 2236 97eb2f92345de32be22d589383580fb3bf9805a770bee7fa870d40cf24ab5e44.exe 2236 97eb2f92345de32be22d589383580fb3bf9805a770bee7fa870d40cf24ab5e44.exe 2236 97eb2f92345de32be22d589383580fb3bf9805a770bee7fa870d40cf24ab5e44.exe 2236 97eb2f92345de32be22d589383580fb3bf9805a770bee7fa870d40cf24ab5e44.exe 2236 97eb2f92345de32be22d589383580fb3bf9805a770bee7fa870d40cf24ab5e44.exe 2236 97eb2f92345de32be22d589383580fb3bf9805a770bee7fa870d40cf24ab5e44.exe 2236 97eb2f92345de32be22d589383580fb3bf9805a770bee7fa870d40cf24ab5e44.exe