Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    102s
  • max time network
    31s
  • platform
    windows7_x64
  • resource
    win7-20221111-en
  • resource tags

    arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
  • submitted
    11/02/2023, 10:24

General

  • Target

    BsgLauncher.12.12.3.1964.exe

  • Size

    99.6MB

  • MD5

    e2e3318cc21e98aa295934eb0ec15ffa

  • SHA1

    6f92835b9713df304b15edc0429ba2829cf75b58

  • SHA256

    7e2b4d70564497c0ba340056e3535bea88224051ce410f2c3336c49f0f7cbd99

  • SHA512

    9df77ab3d7b5d1e84d8d6f3d93c296f3a35c6b0003777d3b35ea1251d629a623cd2356fc8c1c124e1333595eae9d5892381b0eb7118f13cdd468c609e6a2384b

  • SSDEEP

    3145728:eoA0TrjNfOTHy/veET2Hu8nbiUgOtv7qw5U:e6TJObQmmLmgs7q

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\BsgLauncher.12.12.3.1964.exe
    "C:\Users\Admin\AppData\Local\Temp\BsgLauncher.12.12.3.1964.exe"
    1⤵
    • Loads dropped DLL
    PID:560
    • C:\Users\Admin\AppData\Local\Temp\is-JV97G.tmp\BsgLauncher.12.12.3.1964.tmp
      "C:\Users\Admin\AppData\Local\Temp\is-JV97G.tmp\BsgLauncher.12.12.3.1964.tmp" /SL5="$80124,103411498,1145856,C:\Users\Admin\AppData\Local\Temp\BsgLauncher.12.12.3.1964.exe"
      2⤵
        PID:1216

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • \Users\Admin\AppData\Local\Temp\is-JV97G.tmp\BsgLauncher.12.12.3.1964.tmp

      Filesize

      256KB

      MD5

      26030b9cc2df63d3eeba3983d9fb4967

      SHA1

      186cbe9b4e2aa74948c4074055a97af3251abc27

      SHA256

      63730b9fbfd022a39e8cd5133e404f3259b7903ada2b1f888044a92fe87243c5

      SHA512

      4e7fdedd843f4e147f2384dc6937650ae2eac075a0616ad77faee7c71e1136f61a0efa9e19549edf11aa1f6c418f1ddd2c2d8893a6c602d6b367d8498038f455

    • memory/560-54-0x0000000075A91000-0x0000000075A93000-memory.dmp

      Filesize

      8KB

    • memory/560-55-0x0000000000400000-0x0000000000525000-memory.dmp

      Filesize

      1.1MB

    • memory/560-57-0x0000000000400000-0x0000000000525000-memory.dmp

      Filesize

      1.1MB