Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
132s -
max time network
145s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
29/11/2022, 05:50
Static task
static1
Behavioral task
behavioral1
Sample
8b2068514faec2cc7013b948a375dd4050eb959164830c658b2c5764555a1273.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8b2068514faec2cc7013b948a375dd4050eb959164830c658b2c5764555a1273.exe
Resource
win10v2004-20220812-en
General
-
Target
8b2068514faec2cc7013b948a375dd4050eb959164830c658b2c5764555a1273.exe
-
Size
636KB
-
MD5
4b7e917d685e07a9b468444d3c0d2040
-
SHA1
e405a7b8d24895d718c9be56d4009b810dcdb3ba
-
SHA256
8b2068514faec2cc7013b948a375dd4050eb959164830c658b2c5764555a1273
-
SHA512
a18fbe22307ec12b9a8144a876a0ca1c6577d07cc8c7458807011486986f37ad3a8b58cd543b1418ec5723f464672ea90e5fd93c8c0c9bdc31a9b30958205da3
-
SSDEEP
12288:qeB3hfhiC4Z/RDvg5fNUnmFNZTWplHSvUxV5bYkU6bVko:qeNhfhivg51UnmjZNq66x
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/1788-56-0x0000000000400000-0x0000000000505000-memory.dmp upx behavioral1/memory/1788-57-0x0000000000400000-0x0000000000505000-memory.dmp upx -
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-3845472200-3839195424-595303356-1000\Software\Microsoft\Windows\CurrentVersion\Run\AS2014 = "C:\\ProgramData\\RpD333lD\\RpD333lD.exe" 8b2068514faec2cc7013b948a375dd4050eb959164830c658b2c5764555a1273.exe