Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
155s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
29/11/2022, 14:08
Static task
static1
Behavioral task
behavioral1
Sample
aa420fe27c197db4089677d3fc65fb3a8213e3ffb2491b4be0a0e22d3400a3e0.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
aa420fe27c197db4089677d3fc65fb3a8213e3ffb2491b4be0a0e22d3400a3e0.exe
Resource
win10v2004-20220901-en
General
-
Target
aa420fe27c197db4089677d3fc65fb3a8213e3ffb2491b4be0a0e22d3400a3e0.exe
-
Size
86KB
-
MD5
0c1ec3028972041abdd7c3a3eacd4cc1
-
SHA1
d5817c785363cef7a074288b19a1e3b106834733
-
SHA256
aa420fe27c197db4089677d3fc65fb3a8213e3ffb2491b4be0a0e22d3400a3e0
-
SHA512
47117911b1d11596a0307feaf902065a35bac0a2eb19b53134940b98e2f06df44bcec63163b9f4897ebd9af8e460e4dc87acbfc6c39a18fb41eb72295e719d5f
-
SSDEEP
1536:larO2R3XZVPlF31n1TClFvLLcAGJn+yRJCPDzrTn/X8WK2+Q9O:lV2BZVPlFlnxClFvLLcA+sPDzPnfe
Malware Config
Signatures
-
Drops file in Windows directory 14 IoCs
description ioc Process File created C:\Windows\win32dc\DAoC_trainer.exe aa420fe27c197db4089677d3fc65fb3a8213e3ffb2491b4be0a0e22d3400a3e0.exe File created C:\Windows\win32dc\DAoC_fix.exe aa420fe27c197db4089677d3fc65fb3a8213e3ffb2491b4be0a0e22d3400a3e0.exe File created C:\Windows\win32dc\Doom 3_nocd.exe aa420fe27c197db4089677d3fc65fb3a8213e3ffb2491b4be0a0e22d3400a3e0.exe File opened for modification C:\Windows\win32dc\Doom 3(patch).exe aa420fe27c197db4089677d3fc65fb3a8213e3ffb2491b4be0a0e22d3400a3e0.exe File created C:\Windows\win32dc\UT2004_trainer.exe aa420fe27c197db4089677d3fc65fb3a8213e3ffb2491b4be0a0e22d3400a3e0.exe File created C:\Windows\win32dc\Sims 2 + cdfix.exe aa420fe27c197db4089677d3fc65fb3a8213e3ffb2491b4be0a0e22d3400a3e0.exe File created C:\Windows\win32dc\Silent Hill 4_patch.exe aa420fe27c197db4089677d3fc65fb3a8213e3ffb2491b4be0a0e22d3400a3e0.exe File created C:\Windows\win32dc\Half-Life 2 fix.exe aa420fe27c197db4089677d3fc65fb3a8213e3ffb2491b4be0a0e22d3400a3e0.exe File created C:\Windows\win32dc\Counter-Strike + serial.exe aa420fe27c197db4089677d3fc65fb3a8213e3ffb2491b4be0a0e22d3400a3e0.exe File created C:\Windows\win32dc\UT2004_patch.exe aa420fe27c197db4089677d3fc65fb3a8213e3ffb2491b4be0a0e22d3400a3e0.exe File opened for modification C:\Windows\win32dc\Silent Hill 4_patch.exe aa420fe27c197db4089677d3fc65fb3a8213e3ffb2491b4be0a0e22d3400a3e0.exe File created C:\Windows\win32dc\Doom 3(patch).exe aa420fe27c197db4089677d3fc65fb3a8213e3ffb2491b4be0a0e22d3400a3e0.exe File opened for modification C:\Windows\win32dc\DAoC_trainer.exe aa420fe27c197db4089677d3fc65fb3a8213e3ffb2491b4be0a0e22d3400a3e0.exe File opened for modification C:\Windows\win32dc\Sims 2 + cdfix.exe aa420fe27c197db4089677d3fc65fb3a8213e3ffb2491b4be0a0e22d3400a3e0.exe