Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
144s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
01/12/2022, 00:03
Static task
static1
Behavioral task
behavioral1
Sample
5fa44abaf09e8776999531265a713ab19db59fd8c526bc318f59dade168d65c8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5fa44abaf09e8776999531265a713ab19db59fd8c526bc318f59dade168d65c8.exe
Resource
win10v2004-20220812-en
General
-
Target
5fa44abaf09e8776999531265a713ab19db59fd8c526bc318f59dade168d65c8.exe
-
Size
90KB
-
MD5
1b5184f31f654955a026064f99b84c9f
-
SHA1
6b83aefce42a67491371f0d652f78a08bec47fda
-
SHA256
5fa44abaf09e8776999531265a713ab19db59fd8c526bc318f59dade168d65c8
-
SHA512
b75dfcffcb17e12d72a9ffb4ced322513c7c8ec01da0851b7678dc3bb1a5e66b445abc2b896606af0fa1b0a92e0562da03a3f1c0f6feec7e2ff9049ef62df62f
-
SSDEEP
1536:larO2R3XZVPlF31n1TClFvLLcAGJn+yRJCPDzgmE8PUl5n+mE:lV2BZVPlFlnxClFvLLcA+sPDzgmxCh+l
Malware Config
Signatures
-
Drops file in Windows directory 16 IoCs
description ioc Process File opened for modification C:\Windows\win32dc\Doom 3(fix).exe 5fa44abaf09e8776999531265a713ab19db59fd8c526bc318f59dade168d65c8.exe File created C:\Windows\win32dc\FlatOut + fix.exe 5fa44abaf09e8776999531265a713ab19db59fd8c526bc318f59dade168d65c8.exe File opened for modification C:\Windows\win32dc\FlatOut + fix.exe 5fa44abaf09e8776999531265a713ab19db59fd8c526bc318f59dade168d65c8.exe File opened for modification C:\Windows\win32dc\Doom 3(crack).exe 5fa44abaf09e8776999531265a713ab19db59fd8c526bc318f59dade168d65c8.exe File created C:\Windows\win32dc\Half-Life 2 + fix.exe 5fa44abaf09e8776999531265a713ab19db59fd8c526bc318f59dade168d65c8.exe File opened for modification C:\Windows\win32dc\Counter-Strike(codes).exe 5fa44abaf09e8776999531265a713ab19db59fd8c526bc318f59dade168d65c8.exe File created C:\Windows\win32dc\Sims 2 cheat.exe 5fa44abaf09e8776999531265a713ab19db59fd8c526bc318f59dade168d65c8.exe File created C:\Windows\win32dc\Half-Life 2 + serial.exe 5fa44abaf09e8776999531265a713ab19db59fd8c526bc318f59dade168d65c8.exe File opened for modification C:\Windows\win32dc\Counter-Strike_fix.exe 5fa44abaf09e8776999531265a713ab19db59fd8c526bc318f59dade168d65c8.exe File created C:\Windows\win32dc\Doom 3(crack).exe 5fa44abaf09e8776999531265a713ab19db59fd8c526bc318f59dade168d65c8.exe File created C:\Windows\win32dc\Counter-Strike(codes).exe 5fa44abaf09e8776999531265a713ab19db59fd8c526bc318f59dade168d65c8.exe File opened for modification C:\Windows\win32dc\Sims 2 cheat.exe 5fa44abaf09e8776999531265a713ab19db59fd8c526bc318f59dade168d65c8.exe File created C:\Windows\win32dc\Doom 3(hack).exe 5fa44abaf09e8776999531265a713ab19db59fd8c526bc318f59dade168d65c8.exe File created C:\Windows\win32dc\Counter-Strike_fix.exe 5fa44abaf09e8776999531265a713ab19db59fd8c526bc318f59dade168d65c8.exe File created C:\Windows\win32dc\Doom 3(fix).exe 5fa44abaf09e8776999531265a713ab19db59fd8c526bc318f59dade168d65c8.exe File opened for modification C:\Windows\win32dc\Half-Life 2 + fix.exe 5fa44abaf09e8776999531265a713ab19db59fd8c526bc318f59dade168d65c8.exe