Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
136s -
max time network
133s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
04/12/2022, 12:22
Static task
static1
Behavioral task
behavioral1
Sample
995c2c3094ec5398e247abc24319e602bb1723f6e3a9b56fed921b0754ca5fdc.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
995c2c3094ec5398e247abc24319e602bb1723f6e3a9b56fed921b0754ca5fdc.exe
Resource
win10v2004-20221111-en
General
-
Target
995c2c3094ec5398e247abc24319e602bb1723f6e3a9b56fed921b0754ca5fdc.exe
-
Size
375KB
-
MD5
499bf39950ef626ce7205854f195e280
-
SHA1
144e9ba451dc29ee8383ab3b5e1177e0a4339246
-
SHA256
995c2c3094ec5398e247abc24319e602bb1723f6e3a9b56fed921b0754ca5fdc
-
SHA512
593bc3afbb92092be4962053e21d9300ab67ea274226bed52adef527f3fd80da0f897589f3b3fb85562d1d0828906219ac201298c4622e053eba2bb3fe2ea717
-
SSDEEP
6144:O5ptkT0hAlwKse1n49I0gEGCgYefTmauG4xrF:O6gylwKRV0tGd3c
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-999675638-2867687379-27515722-1000\Software\Microsoft\Windows\CurrentVersion\Run 995c2c3094ec5398e247abc24319e602bb1723f6e3a9b56fed921b0754ca5fdc.exe Set value (str) \REGISTRY\USER\S-1-5-21-999675638-2867687379-27515722-1000\Software\Microsoft\Windows\CurrentVersion\Run\0e0c070c0616074d061b06 = "C:\\Users\\Admin\\AppData\\Roaming\\oeud.exe" 995c2c3094ec5398e247abc24319e602bb1723f6e3a9b56fed921b0754ca5fdc.exe