Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
102s -
max time network
31s -
platform
windows7_x64 -
resource
win7-20221111-en -
resource tags
arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system -
submitted
11/02/2023, 10:24
Static task
static1
Behavioral task
behavioral1
Sample
BsgLauncher.12.12.3.1964.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
BsgLauncher.12.12.3.1964.exe
Resource
win10v2004-20220812-en
General
-
Target
BsgLauncher.12.12.3.1964.exe
-
Size
99.6MB
-
MD5
e2e3318cc21e98aa295934eb0ec15ffa
-
SHA1
6f92835b9713df304b15edc0429ba2829cf75b58
-
SHA256
7e2b4d70564497c0ba340056e3535bea88224051ce410f2c3336c49f0f7cbd99
-
SHA512
9df77ab3d7b5d1e84d8d6f3d93c296f3a35c6b0003777d3b35ea1251d629a623cd2356fc8c1c124e1333595eae9d5892381b0eb7118f13cdd468c609e6a2384b
-
SSDEEP
3145728:eoA0TrjNfOTHy/veET2Hu8nbiUgOtv7qw5U:e6TJObQmmLmgs7q
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
pid Process 560 BsgLauncher.12.12.3.1964.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\BsgLauncher.12.12.3.1964.exe"C:\Users\Admin\AppData\Local\Temp\BsgLauncher.12.12.3.1964.exe"1⤵
- Loads dropped DLL
PID:560 -
C:\Users\Admin\AppData\Local\Temp\is-JV97G.tmp\BsgLauncher.12.12.3.1964.tmp"C:\Users\Admin\AppData\Local\Temp\is-JV97G.tmp\BsgLauncher.12.12.3.1964.tmp" /SL5="$80124,103411498,1145856,C:\Users\Admin\AppData\Local\Temp\BsgLauncher.12.12.3.1964.exe"2⤵PID:1216
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
256KB
MD526030b9cc2df63d3eeba3983d9fb4967
SHA1186cbe9b4e2aa74948c4074055a97af3251abc27
SHA25663730b9fbfd022a39e8cd5133e404f3259b7903ada2b1f888044a92fe87243c5
SHA5124e7fdedd843f4e147f2384dc6937650ae2eac075a0616ad77faee7c71e1136f61a0efa9e19549edf11aa1f6c418f1ddd2c2d8893a6c602d6b367d8498038f455