Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
190s -
max time network
85s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
29/11/2022, 14:10
Static task
static1
Behavioral task
behavioral1
Sample
6d0642f7b19388833bd9b0543634d69f4a3305dff54a937462c6654c2db129e3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6d0642f7b19388833bd9b0543634d69f4a3305dff54a937462c6654c2db129e3.exe
Resource
win10v2004-20220812-en
General
-
Target
6d0642f7b19388833bd9b0543634d69f4a3305dff54a937462c6654c2db129e3.exe
-
Size
84KB
-
MD5
0412af582f527fb6909cdab5c5cef302
-
SHA1
b0b3c972839555c6281649dd3c482974de910364
-
SHA256
6d0642f7b19388833bd9b0543634d69f4a3305dff54a937462c6654c2db129e3
-
SHA512
8b11c97b1593469b23bd7a8462a7f9ff0d9072a520fe173cb02869d5324c195b7eb322f30ca444e8c8edf45a959e82b4fdcdee305ee6f7d9b51a18253276da02
-
SSDEEP
1536:larO2R3XZVPlF31n1TClFvLLcAGJn+yRJCPDzVoJK3e:lV2BZVPlFlnxClFvLLcA+sPDz8Ye
Malware Config
Signatures
-
Drops file in Windows directory 20 IoCs
description ioc Process File created C:\Windows\win32dc\Counter-Strike + trainer.exe 6d0642f7b19388833bd9b0543634d69f4a3305dff54a937462c6654c2db129e3.exe File created C:\Windows\win32dc\FlatOut(hack).exe 6d0642f7b19388833bd9b0543634d69f4a3305dff54a937462c6654c2db129e3.exe File created C:\Windows\win32dc\Silent Hill 4 + codes.exe 6d0642f7b19388833bd9b0543634d69f4a3305dff54a937462c6654c2db129e3.exe File opened for modification C:\Windows\win32dc\Silent Hill 4 + codes.exe 6d0642f7b19388833bd9b0543634d69f4a3305dff54a937462c6654c2db129e3.exe File opened for modification C:\Windows\win32dc\Sims 2_fix.exe 6d0642f7b19388833bd9b0543634d69f4a3305dff54a937462c6654c2db129e3.exe File opened for modification C:\Windows\win32dc\FlatOut(serial).exe 6d0642f7b19388833bd9b0543634d69f4a3305dff54a937462c6654c2db129e3.exe File opened for modification C:\Windows\win32dc\Silent Hill 4 + patch.exe 6d0642f7b19388833bd9b0543634d69f4a3305dff54a937462c6654c2db129e3.exe File created C:\Windows\win32dc\DAoC + trainer.exe 6d0642f7b19388833bd9b0543634d69f4a3305dff54a937462c6654c2db129e3.exe File opened for modification C:\Windows\win32dc\DAoC + trainer.exe 6d0642f7b19388833bd9b0543634d69f4a3305dff54a937462c6654c2db129e3.exe File created C:\Windows\win32dc\Sims 2_fix.exe 6d0642f7b19388833bd9b0543634d69f4a3305dff54a937462c6654c2db129e3.exe File opened for modification C:\Windows\win32dc\Counter-Strike + trainer.exe 6d0642f7b19388833bd9b0543634d69f4a3305dff54a937462c6654c2db129e3.exe File created C:\Windows\win32dc\Half-Life 2_fix.exe 6d0642f7b19388833bd9b0543634d69f4a3305dff54a937462c6654c2db129e3.exe File opened for modification C:\Windows\win32dc\Half-Life 2_fix.exe 6d0642f7b19388833bd9b0543634d69f4a3305dff54a937462c6654c2db129e3.exe File created C:\Windows\win32dc\Doom 3 + fix.exe 6d0642f7b19388833bd9b0543634d69f4a3305dff54a937462c6654c2db129e3.exe File opened for modification C:\Windows\win32dc\Doom 3 + fix.exe 6d0642f7b19388833bd9b0543634d69f4a3305dff54a937462c6654c2db129e3.exe File created C:\Windows\win32dc\FlatOut(serial).exe 6d0642f7b19388833bd9b0543634d69f4a3305dff54a937462c6654c2db129e3.exe File created C:\Windows\win32dc\Silent Hill 4 + patch.exe 6d0642f7b19388833bd9b0543634d69f4a3305dff54a937462c6654c2db129e3.exe File opened for modification C:\Windows\win32dc\FlatOut(hack).exe 6d0642f7b19388833bd9b0543634d69f4a3305dff54a937462c6654c2db129e3.exe File created C:\Windows\win32dc\Half-Life 2 codes.exe 6d0642f7b19388833bd9b0543634d69f4a3305dff54a937462c6654c2db129e3.exe File opened for modification C:\Windows\win32dc\Half-Life 2 codes.exe 6d0642f7b19388833bd9b0543634d69f4a3305dff54a937462c6654c2db129e3.exe