Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
120s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system -
submitted
03/10/2023, 15:44
Static task
static1
Behavioral task
behavioral1
Sample
d19f0086f98905880ddd0262f571a01e_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
d19f0086f98905880ddd0262f571a01e_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
d19f0086f98905880ddd0262f571a01e_JC.exe
-
Size
117KB
-
MD5
d19f0086f98905880ddd0262f571a01e
-
SHA1
cadfb5f62c65034887b472d6a7e2dc61e4478cdb
-
SHA256
0e571862727a8a30074ff8cf28237cc24787f6c54adbb4557a4c6f723fa47688
-
SHA512
a40d346dc12ff7e92ce045394c87a5a9be5b5d03d370f5568a33b3e5c05ca3fad74eedb937bf1c670784a3c850f665a9772c1ec4383d1753be8af0ad13f06368
-
SSDEEP
3072:dV2BZVPlFlnxClFvLLcsrHWpjbvO+QfxNIi59DeQp3++5WI/QtO:DQrNFxwj9b6G1fx20Y2u+3QE
Malware Config
Signatures
-
Drops file in Windows directory 17 IoCs
description ioc Process File opened for modification C:\Windows\win32dc\Half-Life 2(crack).exe d19f0086f98905880ddd0262f571a01e_JC.exe File created C:\Windows\win32dc\Doom 3 + codes.exe d19f0086f98905880ddd0262f571a01e_JC.exe File opened for modification C:\Windows\win32dc\Doom 3 + codes.exe d19f0086f98905880ddd0262f571a01e_JC.exe File created C:\Windows\win32dc\UT2004_crack.exe d19f0086f98905880ddd0262f571a01e_JC.exe File created C:\Windows\win32dc\FlatOut + cheat.exe d19f0086f98905880ddd0262f571a01e_JC.exe File opened for modification C:\Windows\win32dc\FlatOut + cheat.exe d19f0086f98905880ddd0262f571a01e_JC.exe File created C:\Windows\win32dc\DAoC(patch).exe d19f0086f98905880ddd0262f571a01e_JC.exe File opened for modification C:\Windows\win32dc\UT2004_cdfix.exe d19f0086f98905880ddd0262f571a01e_JC.exe File opened for modification C:\Windows\win32dc\UT2004_crack.exe d19f0086f98905880ddd0262f571a01e_JC.exe File created C:\Windows\win32dc\Half-Life 2(crack).exe d19f0086f98905880ddd0262f571a01e_JC.exe File created C:\Windows\win32dc\FlatOut(codes).exe d19f0086f98905880ddd0262f571a01e_JC.exe File created C:\Windows\win32dc\Quake3(crack).exe d19f0086f98905880ddd0262f571a01e_JC.exe File created C:\Windows\win32dc\UT2004 + patch.exe d19f0086f98905880ddd0262f571a01e_JC.exe File created C:\Windows\win32dc\UT2004_cdfix.exe d19f0086f98905880ddd0262f571a01e_JC.exe File opened for modification C:\Windows\win32dc\FlatOut(codes).exe d19f0086f98905880ddd0262f571a01e_JC.exe File created C:\Windows\win32dc\Silent Hill 4 nocd.exe d19f0086f98905880ddd0262f571a01e_JC.exe File opened for modification C:\Windows\win32dc\Silent Hill 4 nocd.exe d19f0086f98905880ddd0262f571a01e_JC.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
119KB
MD5f0a0eb02a679263483d1b5175fae5287
SHA1919444fd94a71cbbdfa67e42c3c29545d359b275
SHA256de4135400a603af6d621810ee09259124f39865d402a005fdb12dc65ad6a73a5
SHA512643c3696f3bed0d4374bffb1a5d6277ea59a026a4a1e826b155d0025f7b42abcf376589d174bf7270c8ffd2313c22f966d40d81c3125ac92c08ff20ff6befe49