Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
7Static
static
7HappyMod-3-0-3a.apk
android-9-x86
7HappyMod-3-0-3a.apk
android-11-x64
70OO00l111l1l
windows7-x64
10OO00l111l1l
windows10-2004-x64
1baseline.prof
windows7-x64
3baseline.prof
windows10-2004-x64
3baseline.profm
windows7-x64
3baseline.profm
windows10-2004-x64
3data.json
windows7-x64
3data.json
windows10-2004-x64
3demo.html
windows7-x64
1demo.html
windows10-2004-x64
1filedownlo...erties
windows7-x64
3filedownlo...erties
windows10-2004-x64
3happygame.js
windows7-x64
1happygame.js
windows10-2004-x64
1img_0.png
windows7-x64
3img_0.png
windows10-2004-x64
3img_1.png
windows7-x64
3img_1.png
windows10-2004-x64
3img_10.png
windows7-x64
3img_10.png
windows10-2004-x64
3img_11.png
windows7-x64
3img_11.png
windows10-2004-x64
3img_12.png
windows7-x64
3img_12.png
windows10-2004-x64
3img_2.png
windows7-x64
3img_2.png
windows10-2004-x64
3img_3.png
windows7-x64
3img_3.png
windows10-2004-x64
3img_4.png
windows7-x64
3img_4.png
windows10-2004-x64
3Analysis
-
max time kernel
124s -
max time network
132s -
platform
windows10-2004_x64 -
resource
win10v2004-20230831-en -
resource tags
arch:x64arch:x86image:win10v2004-20230831-enlocale:en-usos:windows10-2004-x64system -
submitted
01/09/2023, 14:29
Static task
static1
Behavioral task
behavioral1
Sample
HappyMod-3-0-3a.apk
Resource
android-x86-arm-20230831-en
Behavioral task
behavioral2
Sample
HappyMod-3-0-3a.apk
Resource
android-x64-arm64-20230831-en
Behavioral task
behavioral3
Sample
0OO00l111l1l
Resource
win7-20230831-en
Behavioral task
behavioral4
Sample
0OO00l111l1l
Resource
win10v2004-20230831-en
Behavioral task
behavioral5
Sample
baseline.prof
Resource
win7-20230831-en
Behavioral task
behavioral6
Sample
baseline.prof
Resource
win10v2004-20230831-en
Behavioral task
behavioral7
Sample
baseline.profm
Resource
win7-20230831-en
Behavioral task
behavioral8
Sample
baseline.profm
Resource
win10v2004-20230831-en
Behavioral task
behavioral9
Sample
data.json
Resource
win7-20230831-en
Behavioral task
behavioral10
Sample
data.json
Resource
win10v2004-20230831-en
Behavioral task
behavioral11
Sample
demo.html
Resource
win7-20230831-en
Behavioral task
behavioral12
Sample
demo.html
Resource
win10v2004-20230831-en
Behavioral task
behavioral13
Sample
filedownloader.properties
Resource
win7-20230831-en
Behavioral task
behavioral14
Sample
filedownloader.properties
Resource
win10v2004-20230831-en
Behavioral task
behavioral15
Sample
happygame.js
Resource
win7-20230831-en
Behavioral task
behavioral16
Sample
happygame.js
Resource
win10v2004-20230831-en
Behavioral task
behavioral17
Sample
img_0.png
Resource
win7-20230831-en
Behavioral task
behavioral18
Sample
img_0.png
Resource
win10v2004-20230831-en
Behavioral task
behavioral19
Sample
img_1.png
Resource
win7-20230831-en
Behavioral task
behavioral20
Sample
img_1.png
Resource
win10v2004-20230831-en
Behavioral task
behavioral21
Sample
img_10.png
Resource
win7-20230831-en
Behavioral task
behavioral22
Sample
img_10.png
Resource
win10v2004-20230831-en
Behavioral task
behavioral23
Sample
img_11.png
Resource
win7-20230831-en
Behavioral task
behavioral24
Sample
img_11.png
Resource
win10v2004-20230831-en
Behavioral task
behavioral25
Sample
img_12.png
Resource
win7-20230831-en
Behavioral task
behavioral26
Sample
img_12.png
Resource
win10v2004-20230831-en
Behavioral task
behavioral27
Sample
img_2.png
Resource
win7-20230831-en
Behavioral task
behavioral28
Sample
img_2.png
Resource
win10v2004-20230831-en
Behavioral task
behavioral29
Sample
img_3.png
Resource
win7-20230831-en
Behavioral task
behavioral30
Sample
img_3.png
Resource
win10v2004-20230831-en
Behavioral task
behavioral31
Sample
img_4.png
Resource
win7-20230831-en
Behavioral task
behavioral32
Sample
img_4.png
Resource
win10v2004-20230831-en
General
-
Target
baseline.prof
-
Size
1KB
-
MD5
389d2215bb8d71bc50f92897b04b94a9
-
SHA1
ad3d5946ffb4fb2c7d4fbcc4252b625204888140
-
SHA256
652bc65f0b4f52b7380f91a2a7a007ec5298b788f66ee679f3522c7139fcb73d
-
SHA512
6a7acf737056063f563b7f3fd121f16b204f8e5f3f29ada7b69b8f3142351a9602b7bad70cf382cd7b3f93b8a982c7730b4d78fae0026dfe4be2973f0db30396
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-2848203831-2014322062-3611574811-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-2848203831-2014322062-3611574811-1000_Classes\Local Settings OpenWith.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4368 OpenWith.exe