Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
35s -
max time network
55s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
03/12/2022, 04:07
Behavioral task
behavioral1
Sample
d4b252b0383e8d12d5c38850e029aea728c43f665074d40312a954c93c53d485.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d4b252b0383e8d12d5c38850e029aea728c43f665074d40312a954c93c53d485.exe
Resource
win10v2004-20220812-en
General
-
Target
d4b252b0383e8d12d5c38850e029aea728c43f665074d40312a954c93c53d485.exe
-
Size
89KB
-
MD5
170b82f0320e14566d52110a32ad6aec
-
SHA1
d1a63cf739e5d562cb61818bb21b1b81ffa92e64
-
SHA256
d4b252b0383e8d12d5c38850e029aea728c43f665074d40312a954c93c53d485
-
SHA512
13e87a98cce216f6cd79ae184fe1f9487d8b9c63067d1b817add2fb2ef64494f4b7c3b75b73bb3a3b1b8f309e7aaa1a70d30cb2a939ad136a684a0ea253b4b83
-
SSDEEP
1536:D/qZ1UJQFP71kmj/+1zF+jvJAU4s/SvbiOUrrX+aM/gsshHKRdT5mkkyuWUb:2Z1UUpT+zSJJ4lvbjarOaMIsslKRdTcz
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/1932-55-0x0000000000400000-0x0000000000437000-memory.dmp upx behavioral1/memory/1932-56-0x0000000000400000-0x0000000000437000-memory.dmp upx -
Adds Run key to start application 2 TTPs 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-2292972927-2705560509-2768824231-1000\Software\Microsoft\Windows\CurrentVersion\Run d4b252b0383e8d12d5c38850e029aea728c43f665074d40312a954c93c53d485.exe Set value (str) \REGISTRY\USER\S-1-5-21-2292972927-2705560509-2768824231-1000\Software\Microsoft\Windows\CurrentVersion\Run\MSFox = "C:\\Users\\Admin\\AppData\\Local\\Temp\\d4b252b0383e8d12d5c38850e029aea728c43f665074d40312a954c93c53d485.exe" d4b252b0383e8d12d5c38850e029aea728c43f665074d40312a954c93c53d485.exe