Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
151s -
max time network
36s -
platform
windows7_x64 -
resource
win7-20221111-en -
resource tags
arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system -
submitted
30/11/2022, 23:58
Static task
static1
Behavioral task
behavioral1
Sample
fb733937f649fde97b065ea8ab0cfa23b8b122e9549db9a8a5eb421a7f830fd6.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
fb733937f649fde97b065ea8ab0cfa23b8b122e9549db9a8a5eb421a7f830fd6.exe
Resource
win10v2004-20220812-en
General
-
Target
fb733937f649fde97b065ea8ab0cfa23b8b122e9549db9a8a5eb421a7f830fd6.exe
-
Size
93KB
-
MD5
059939c8dc3e57d03d4823c713e57eb3
-
SHA1
a6f8c967873835ebaa5eb5ad0e4aeccaf9bd8b56
-
SHA256
fb733937f649fde97b065ea8ab0cfa23b8b122e9549db9a8a5eb421a7f830fd6
-
SHA512
681683dd71d3713e8cf69a27f65cabf236acf5792f079952c1c865785c528a299cbf8d3e6e47df5970ad696b9f77955ae8d1d8853442e9d27569c555286abffe
-
SSDEEP
1536:larO2R3XZVPlF31n1TClFvLLcAGJn+yRJCPDzGvxuqWiqIu/AsXvE0:lV2BZVPlFlnxClFvLLcA+sPDzGvxVQ/7
Malware Config
Signatures
-
Drops file in Windows directory 18 IoCs
description ioc Process File created C:\Windows\win32dc\DAoC_nocd.exe fb733937f649fde97b065ea8ab0cfa23b8b122e9549db9a8a5eb421a7f830fd6.exe File opened for modification C:\Windows\win32dc\DAoC_nocd.exe fb733937f649fde97b065ea8ab0cfa23b8b122e9549db9a8a5eb421a7f830fd6.exe File created C:\Windows\win32dc\Counter-Strike + codes.exe fb733937f649fde97b065ea8ab0cfa23b8b122e9549db9a8a5eb421a7f830fd6.exe File opened for modification C:\Windows\win32dc\Sims 2 cheat.exe fb733937f649fde97b065ea8ab0cfa23b8b122e9549db9a8a5eb421a7f830fd6.exe File created C:\Windows\win32dc\Silent Hill 4(patch).exe fb733937f649fde97b065ea8ab0cfa23b8b122e9549db9a8a5eb421a7f830fd6.exe File created C:\Windows\win32dc\UT2004_codes.exe fb733937f649fde97b065ea8ab0cfa23b8b122e9549db9a8a5eb421a7f830fd6.exe File created C:\Windows\win32dc\BattleField 1942 + serial.exe fb733937f649fde97b065ea8ab0cfa23b8b122e9549db9a8a5eb421a7f830fd6.exe File opened for modification C:\Windows\win32dc\BattleField 1942 + serial.exe fb733937f649fde97b065ea8ab0cfa23b8b122e9549db9a8a5eb421a7f830fd6.exe File opened for modification C:\Windows\win32dc\Counter-Strike cdfix.exe fb733937f649fde97b065ea8ab0cfa23b8b122e9549db9a8a5eb421a7f830fd6.exe File opened for modification C:\Windows\win32dc\UT2004_codes.exe fb733937f649fde97b065ea8ab0cfa23b8b122e9549db9a8a5eb421a7f830fd6.exe File created C:\Windows\win32dc\Sims 2 + cheat.exe fb733937f649fde97b065ea8ab0cfa23b8b122e9549db9a8a5eb421a7f830fd6.exe File created C:\Windows\win32dc\FlatOut + fix.exe fb733937f649fde97b065ea8ab0cfa23b8b122e9549db9a8a5eb421a7f830fd6.exe File opened for modification C:\Windows\win32dc\FlatOut + fix.exe fb733937f649fde97b065ea8ab0cfa23b8b122e9549db9a8a5eb421a7f830fd6.exe File opened for modification C:\Windows\win32dc\BattleField 1942 hack.exe fb733937f649fde97b065ea8ab0cfa23b8b122e9549db9a8a5eb421a7f830fd6.exe File opened for modification C:\Windows\win32dc\Counter-Strike + codes.exe fb733937f649fde97b065ea8ab0cfa23b8b122e9549db9a8a5eb421a7f830fd6.exe File created C:\Windows\win32dc\Counter-Strike cdfix.exe fb733937f649fde97b065ea8ab0cfa23b8b122e9549db9a8a5eb421a7f830fd6.exe File created C:\Windows\win32dc\Sims 2 cheat.exe fb733937f649fde97b065ea8ab0cfa23b8b122e9549db9a8a5eb421a7f830fd6.exe File created C:\Windows\win32dc\BattleField 1942 hack.exe fb733937f649fde97b065ea8ab0cfa23b8b122e9549db9a8a5eb421a7f830fd6.exe