Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
162s -
max time network
80s -
platform
windows7_x64 -
resource
win7-20221111-en -
resource tags
arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system -
submitted
01/12/2022, 09:50
Static task
static1
Behavioral task
behavioral1
Sample
d226424ef3fe11dd76625bd564be1da41c2d354b24da2caa5ca05b7ad67963f9.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d226424ef3fe11dd76625bd564be1da41c2d354b24da2caa5ca05b7ad67963f9.exe
Resource
win10v2004-20221111-en
General
-
Target
d226424ef3fe11dd76625bd564be1da41c2d354b24da2caa5ca05b7ad67963f9.exe
-
Size
86KB
-
MD5
1711e4c08a53d6fd49b1433d1a9a8a5c
-
SHA1
780595667ebb27dc70883dc87929c1cbc6b6a7c3
-
SHA256
d226424ef3fe11dd76625bd564be1da41c2d354b24da2caa5ca05b7ad67963f9
-
SHA512
836ff9d09cd940cbd20f948f1ab8ab09a784b8fb6d9f6bd044bdc401a6244bd20b1188cdb5f4adf64f3555e94a6cb94da8ee73cbb7f1a8f95237b6249c8aee81
-
SSDEEP
1536:larO2R3XZVPlF31n1TClFvLLcAGJn+yRJCPDzhaghmpvQUySjDb4ZcxyM:lV2BZVPlFlnxClFvLLcA+sPDzhaghkIY
Malware Config
Signatures
-
Drops file in Windows directory 17 IoCs
description ioc Process File opened for modification C:\Windows\win32dc\Counter-Strike_codes.exe d226424ef3fe11dd76625bd564be1da41c2d354b24da2caa5ca05b7ad67963f9.exe File created C:\Windows\win32dc\FlatOut crack.exe d226424ef3fe11dd76625bd564be1da41c2d354b24da2caa5ca05b7ad67963f9.exe File created C:\Windows\win32dc\DAoC + fix.exe d226424ef3fe11dd76625bd564be1da41c2d354b24da2caa5ca05b7ad67963f9.exe File created C:\Windows\win32dc\Sims 2(codes).exe d226424ef3fe11dd76625bd564be1da41c2d354b24da2caa5ca05b7ad67963f9.exe File created C:\Windows\win32dc\Counter-Strike_codes.exe d226424ef3fe11dd76625bd564be1da41c2d354b24da2caa5ca05b7ad67963f9.exe File created C:\Windows\win32dc\Silent Hill 4 + hack.exe d226424ef3fe11dd76625bd564be1da41c2d354b24da2caa5ca05b7ad67963f9.exe File opened for modification C:\Windows\win32dc\Sims 2(trainer).exe d226424ef3fe11dd76625bd564be1da41c2d354b24da2caa5ca05b7ad67963f9.exe File created C:\Windows\win32dc\BattleField 1942(nocd).exe d226424ef3fe11dd76625bd564be1da41c2d354b24da2caa5ca05b7ad67963f9.exe File created C:\Windows\win32dc\Sims 2_serial.exe d226424ef3fe11dd76625bd564be1da41c2d354b24da2caa5ca05b7ad67963f9.exe File created C:\Windows\win32dc\BattleField 1942 + crack.exe d226424ef3fe11dd76625bd564be1da41c2d354b24da2caa5ca05b7ad67963f9.exe File created C:\Windows\win32dc\Sims 2(trainer).exe d226424ef3fe11dd76625bd564be1da41c2d354b24da2caa5ca05b7ad67963f9.exe File opened for modification C:\Windows\win32dc\Silent Hill 4 + hack.exe d226424ef3fe11dd76625bd564be1da41c2d354b24da2caa5ca05b7ad67963f9.exe File opened for modification C:\Windows\win32dc\BattleField 1942(nocd).exe d226424ef3fe11dd76625bd564be1da41c2d354b24da2caa5ca05b7ad67963f9.exe File created C:\Windows\win32dc\Silent Hill 4(patch).exe d226424ef3fe11dd76625bd564be1da41c2d354b24da2caa5ca05b7ad67963f9.exe File opened for modification C:\Windows\win32dc\Silent Hill 4(patch).exe d226424ef3fe11dd76625bd564be1da41c2d354b24da2caa5ca05b7ad67963f9.exe File opened for modification C:\Windows\win32dc\BattleField 1942 + crack.exe d226424ef3fe11dd76625bd564be1da41c2d354b24da2caa5ca05b7ad67963f9.exe File opened for modification C:\Windows\win32dc\DAoC + fix.exe d226424ef3fe11dd76625bd564be1da41c2d354b24da2caa5ca05b7ad67963f9.exe