Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
184s -
max time network
192s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
01/12/2022, 09:51
Static task
static1
Behavioral task
behavioral1
Sample
a4c189bd69f32e0b1eb1cb8d3725d4316b558343083a0b8b08fa0eb10a7d9950.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a4c189bd69f32e0b1eb1cb8d3725d4316b558343083a0b8b08fa0eb10a7d9950.exe
Resource
win10v2004-20221111-en
General
-
Target
a4c189bd69f32e0b1eb1cb8d3725d4316b558343083a0b8b08fa0eb10a7d9950.exe
-
Size
80KB
-
MD5
1299d683a974383ff08f1e512aec414c
-
SHA1
62e49707767f0f2face0a53c0df94edc22cd8fcb
-
SHA256
a4c189bd69f32e0b1eb1cb8d3725d4316b558343083a0b8b08fa0eb10a7d9950
-
SHA512
4709b47f447de5e3c1c4f4f58eaa19fe8e98fb640451ddffecd0364ca1424c8d842ec09a67b96f271facfc2992d15b17e886adb8b803c04a3def8945308a7069
-
SSDEEP
1536:larO2R3XZVPlF31n1TClFvLLcAGJn+yRJCPDz7IaSs8HknN7j:lV2BZVPlFlnxClFvLLcA+sPDz7IayKj
Malware Config
Signatures
-
Drops file in Windows directory 17 IoCs
description ioc Process File created C:\Windows\win32dc\Counter-Strike + fix.exe a4c189bd69f32e0b1eb1cb8d3725d4316b558343083a0b8b08fa0eb10a7d9950.exe File opened for modification C:\Windows\win32dc\Counter-Strike + fix.exe a4c189bd69f32e0b1eb1cb8d3725d4316b558343083a0b8b08fa0eb10a7d9950.exe File created C:\Windows\win32dc\Doom 3 codes.exe a4c189bd69f32e0b1eb1cb8d3725d4316b558343083a0b8b08fa0eb10a7d9950.exe File created C:\Windows\win32dc\Doom 3_hack.exe a4c189bd69f32e0b1eb1cb8d3725d4316b558343083a0b8b08fa0eb10a7d9950.exe File created C:\Windows\win32dc\Sims 2 fix.exe a4c189bd69f32e0b1eb1cb8d3725d4316b558343083a0b8b08fa0eb10a7d9950.exe File created C:\Windows\win32dc\Silent Hill 4(codes).exe a4c189bd69f32e0b1eb1cb8d3725d4316b558343083a0b8b08fa0eb10a7d9950.exe File opened for modification C:\Windows\win32dc\Silent Hill 4(codes).exe a4c189bd69f32e0b1eb1cb8d3725d4316b558343083a0b8b08fa0eb10a7d9950.exe File created C:\Windows\win32dc\Half-Life 2(cdfix).exe a4c189bd69f32e0b1eb1cb8d3725d4316b558343083a0b8b08fa0eb10a7d9950.exe File opened for modification C:\Windows\win32dc\Half-Life 2(cdfix).exe a4c189bd69f32e0b1eb1cb8d3725d4316b558343083a0b8b08fa0eb10a7d9950.exe File created C:\Windows\win32dc\FlatOut_nocd.exe a4c189bd69f32e0b1eb1cb8d3725d4316b558343083a0b8b08fa0eb10a7d9950.exe File created C:\Windows\win32dc\BattleField 1942 + cheat.exe a4c189bd69f32e0b1eb1cb8d3725d4316b558343083a0b8b08fa0eb10a7d9950.exe File created C:\Windows\win32dc\BattleField 1942 nocd.exe a4c189bd69f32e0b1eb1cb8d3725d4316b558343083a0b8b08fa0eb10a7d9950.exe File opened for modification C:\Windows\win32dc\BattleField 1942 nocd.exe a4c189bd69f32e0b1eb1cb8d3725d4316b558343083a0b8b08fa0eb10a7d9950.exe File opened for modification C:\Windows\win32dc\FlatOut_nocd.exe a4c189bd69f32e0b1eb1cb8d3725d4316b558343083a0b8b08fa0eb10a7d9950.exe File opened for modification C:\Windows\win32dc\BattleField 1942 + cheat.exe a4c189bd69f32e0b1eb1cb8d3725d4316b558343083a0b8b08fa0eb10a7d9950.exe File opened for modification C:\Windows\win32dc\Doom 3 codes.exe a4c189bd69f32e0b1eb1cb8d3725d4316b558343083a0b8b08fa0eb10a7d9950.exe File created C:\Windows\win32dc\Silent Hill 4 serial.exe a4c189bd69f32e0b1eb1cb8d3725d4316b558343083a0b8b08fa0eb10a7d9950.exe