Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
160s -
max time network
175s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
12/10/2023, 01:04
Static task
static1
Behavioral task
behavioral1
Sample
2d4d22bd553372a29f6e155ebfc8e76f148a56ddf847c4bec65cb45dfeda3428.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
2d4d22bd553372a29f6e155ebfc8e76f148a56ddf847c4bec65cb45dfeda3428.exe
Resource
win10v2004-20230915-en
General
-
Target
2d4d22bd553372a29f6e155ebfc8e76f148a56ddf847c4bec65cb45dfeda3428.exe
-
Size
1.9MB
-
MD5
c1d494b871f12f77b8e58b583cd5017c
-
SHA1
2d2575195d2a932ec636d60d8e6049f6835e6d7f
-
SHA256
2d4d22bd553372a29f6e155ebfc8e76f148a56ddf847c4bec65cb45dfeda3428
-
SHA512
d62a80993375df5de723b11e519b26c3ffa89ca20c98632fdff3d1e39abf8c16ee935e2624e7b2541bed8b002afede561a4f92587dee52a0e26baacd175acae1
-
SSDEEP
49152:ZhOHsgLe4q+L0CninfXdLEThyV1kSqSvGgbkarh7P9inm4uLZOkZ:POG4q+L0CafXxEVyV1kSqSvGgwa97P97
Malware Config
Signatures
-
Drops file in Program Files directory 64 IoCs
description ioc Process File created C:\Program Files (x86)\BraveSoftware\Temp\GUM1D47.tmp\goopdateres_uk.dll 2d4d22bd553372a29f6e155ebfc8e76f148a56ddf847c4bec65cb45dfeda3428.exe File created C:\Program Files (x86)\BraveSoftware\Temp\GUM1D47.tmp\goopdateres_vi.dll 2d4d22bd553372a29f6e155ebfc8e76f148a56ddf847c4bec65cb45dfeda3428.exe File created C:\Program Files (x86)\BraveSoftware\Temp\GUM1D47.tmp\goopdateres_zh-TW.dll 2d4d22bd553372a29f6e155ebfc8e76f148a56ddf847c4bec65cb45dfeda3428.exe File created C:\Program Files (x86)\BraveSoftware\Temp\GUM1D47.tmp\psmachine_64.dll 2d4d22bd553372a29f6e155ebfc8e76f148a56ddf847c4bec65cb45dfeda3428.exe File created C:\Program Files (x86)\BraveSoftware\Temp\GUM1D47.tmp\psuser_64.dll 2d4d22bd553372a29f6e155ebfc8e76f148a56ddf847c4bec65cb45dfeda3428.exe File created C:\Program Files (x86)\BraveSoftware\Temp\GUM1D47.tmp\goopdateres_pt-PT.dll 2d4d22bd553372a29f6e155ebfc8e76f148a56ddf847c4bec65cb45dfeda3428.exe File created C:\Program Files (x86)\BraveSoftware\Temp\GUM1D47.tmp\goopdateres_sr.dll 2d4d22bd553372a29f6e155ebfc8e76f148a56ddf847c4bec65cb45dfeda3428.exe File created C:\Program Files (x86)\BraveSoftware\Temp\GUM1D47.tmp\goopdateres_cs.dll 2d4d22bd553372a29f6e155ebfc8e76f148a56ddf847c4bec65cb45dfeda3428.exe File created C:\Program Files (x86)\BraveSoftware\Temp\GUM1D47.tmp\goopdateres_da.dll 2d4d22bd553372a29f6e155ebfc8e76f148a56ddf847c4bec65cb45dfeda3428.exe File created C:\Program Files (x86)\BraveSoftware\Temp\GUM1D47.tmp\goopdateres_hr.dll 2d4d22bd553372a29f6e155ebfc8e76f148a56ddf847c4bec65cb45dfeda3428.exe File created C:\Program Files (x86)\BraveSoftware\Temp\GUM1D47.tmp\goopdateres_sk.dll 2d4d22bd553372a29f6e155ebfc8e76f148a56ddf847c4bec65cb45dfeda3428.exe File created C:\Program Files (x86)\BraveSoftware\Temp\GUM1D47.tmp\goopdateres_hi.dll 2d4d22bd553372a29f6e155ebfc8e76f148a56ddf847c4bec65cb45dfeda3428.exe File created C:\Program Files (x86)\BraveSoftware\Temp\GUM1D47.tmp\goopdateres_id.dll 2d4d22bd553372a29f6e155ebfc8e76f148a56ddf847c4bec65cb45dfeda3428.exe File created C:\Program Files (x86)\BraveSoftware\Temp\GUM1D47.tmp\goopdateres_sv.dll 2d4d22bd553372a29f6e155ebfc8e76f148a56ddf847c4bec65cb45dfeda3428.exe File created C:\Program Files (x86)\BraveSoftware\Temp\GUM1D47.tmp\goopdateres_th.dll 2d4d22bd553372a29f6e155ebfc8e76f148a56ddf847c4bec65cb45dfeda3428.exe File opened for modification C:\Program Files (x86)\BraveSoftware\Temp\GUT1D48.tmp 2d4d22bd553372a29f6e155ebfc8e76f148a56ddf847c4bec65cb45dfeda3428.exe File created C:\Program Files (x86)\BraveSoftware\Temp\GUM1D47.tmp\BraveUpdate.exe 2d4d22bd553372a29f6e155ebfc8e76f148a56ddf847c4bec65cb45dfeda3428.exe File created C:\Program Files (x86)\BraveSoftware\Temp\GUM1D47.tmp\goopdateres_de.dll 2d4d22bd553372a29f6e155ebfc8e76f148a56ddf847c4bec65cb45dfeda3428.exe File created C:\Program Files (x86)\BraveSoftware\Temp\GUM1D47.tmp\goopdateres_ta.dll 2d4d22bd553372a29f6e155ebfc8e76f148a56ddf847c4bec65cb45dfeda3428.exe File created C:\Program Files (x86)\BraveSoftware\Temp\GUM1D47.tmp\goopdateres_es-419.dll 2d4d22bd553372a29f6e155ebfc8e76f148a56ddf847c4bec65cb45dfeda3428.exe File created C:\Program Files (x86)\BraveSoftware\Temp\GUM1D47.tmp\goopdateres_et.dll 2d4d22bd553372a29f6e155ebfc8e76f148a56ddf847c4bec65cb45dfeda3428.exe File created C:\Program Files (x86)\BraveSoftware\Temp\GUM1D47.tmp\BraveUpdateSetup.exe 2d4d22bd553372a29f6e155ebfc8e76f148a56ddf847c4bec65cb45dfeda3428.exe File created C:\Program Files (x86)\BraveSoftware\Temp\GUM1D47.tmp\goopdateres_iw.dll 2d4d22bd553372a29f6e155ebfc8e76f148a56ddf847c4bec65cb45dfeda3428.exe File created C:\Program Files (x86)\BraveSoftware\Temp\GUM1D47.tmp\goopdateres_ml.dll 2d4d22bd553372a29f6e155ebfc8e76f148a56ddf847c4bec65cb45dfeda3428.exe File created C:\Program Files (x86)\BraveSoftware\Temp\GUM1D47.tmp\BraveCrashHandlerArm64.exe 2d4d22bd553372a29f6e155ebfc8e76f148a56ddf847c4bec65cb45dfeda3428.exe File created C:\Program Files (x86)\BraveSoftware\Temp\GUM1D47.tmp\goopdateres_en-GB.dll 2d4d22bd553372a29f6e155ebfc8e76f148a56ddf847c4bec65cb45dfeda3428.exe File created C:\Program Files (x86)\BraveSoftware\Temp\GUM1D47.tmp\goopdateres_fi.dll 2d4d22bd553372a29f6e155ebfc8e76f148a56ddf847c4bec65cb45dfeda3428.exe File created C:\Program Files (x86)\BraveSoftware\Temp\GUM1D47.tmp\goopdateres_hu.dll 2d4d22bd553372a29f6e155ebfc8e76f148a56ddf847c4bec65cb45dfeda3428.exe File opened for modification C:\Program Files (x86)\BraveSoftware\Temp\GUM1D47.tmp\BraveUpdateSetup.exe 2d4d22bd553372a29f6e155ebfc8e76f148a56ddf847c4bec65cb45dfeda3428.exe File created C:\Program Files (x86)\BraveSoftware\Temp\GUM1D47.tmp\BraveUpdateComRegisterShellArm64.exe 2d4d22bd553372a29f6e155ebfc8e76f148a56ddf847c4bec65cb45dfeda3428.exe File created C:\Program Files (x86)\BraveSoftware\Temp\GUM1D47.tmp\goopdateres_bg.dll 2d4d22bd553372a29f6e155ebfc8e76f148a56ddf847c4bec65cb45dfeda3428.exe File created C:\Program Files (x86)\BraveSoftware\Temp\GUM1D47.tmp\goopdateres_fa.dll 2d4d22bd553372a29f6e155ebfc8e76f148a56ddf847c4bec65cb45dfeda3428.exe File created C:\Program Files (x86)\BraveSoftware\Temp\GUM1D47.tmp\goopdateres_ru.dll 2d4d22bd553372a29f6e155ebfc8e76f148a56ddf847c4bec65cb45dfeda3428.exe File created C:\Program Files (x86)\BraveSoftware\Temp\GUM1D47.tmp\psmachine.dll 2d4d22bd553372a29f6e155ebfc8e76f148a56ddf847c4bec65cb45dfeda3428.exe File created C:\Program Files (x86)\BraveSoftware\Temp\GUM1D47.tmp\goopdateres_el.dll 2d4d22bd553372a29f6e155ebfc8e76f148a56ddf847c4bec65cb45dfeda3428.exe File created C:\Program Files (x86)\BraveSoftware\Temp\GUM1D47.tmp\goopdateres_ko.dll 2d4d22bd553372a29f6e155ebfc8e76f148a56ddf847c4bec65cb45dfeda3428.exe File created C:\Program Files (x86)\BraveSoftware\Temp\GUM1D47.tmp\goopdateres_mr.dll 2d4d22bd553372a29f6e155ebfc8e76f148a56ddf847c4bec65cb45dfeda3428.exe File created C:\Program Files (x86)\BraveSoftware\Temp\GUM1D47.tmp\BraveUpdateBroker.exe 2d4d22bd553372a29f6e155ebfc8e76f148a56ddf847c4bec65cb45dfeda3428.exe File created C:\Program Files (x86)\BraveSoftware\Temp\GUM1D47.tmp\goopdateres_pl.dll 2d4d22bd553372a29f6e155ebfc8e76f148a56ddf847c4bec65cb45dfeda3428.exe File created C:\Program Files (x86)\BraveSoftware\Temp\GUM1D47.tmp\goopdateres_ro.dll 2d4d22bd553372a29f6e155ebfc8e76f148a56ddf847c4bec65cb45dfeda3428.exe File created C:\Program Files (x86)\BraveSoftware\Temp\GUM1D47.tmp\goopdateres_fr.dll 2d4d22bd553372a29f6e155ebfc8e76f148a56ddf847c4bec65cb45dfeda3428.exe File created C:\Program Files (x86)\BraveSoftware\Temp\GUM1D47.tmp\goopdateres_kn.dll 2d4d22bd553372a29f6e155ebfc8e76f148a56ddf847c4bec65cb45dfeda3428.exe File created C:\Program Files (x86)\BraveSoftware\Temp\GUM1D47.tmp\psuser.dll 2d4d22bd553372a29f6e155ebfc8e76f148a56ddf847c4bec65cb45dfeda3428.exe File created C:\Program Files (x86)\BraveSoftware\Temp\GUM1D47.tmp\BraveUpdateCore.exe 2d4d22bd553372a29f6e155ebfc8e76f148a56ddf847c4bec65cb45dfeda3428.exe File created C:\Program Files (x86)\BraveSoftware\Temp\GUM1D47.tmp\goopdateres_es.dll 2d4d22bd553372a29f6e155ebfc8e76f148a56ddf847c4bec65cb45dfeda3428.exe File created C:\Program Files (x86)\BraveSoftware\Temp\GUM1D47.tmp\goopdateres_fil.dll 2d4d22bd553372a29f6e155ebfc8e76f148a56ddf847c4bec65cb45dfeda3428.exe File created C:\Program Files (x86)\BraveSoftware\Temp\GUM1D47.tmp\goopdateres_te.dll 2d4d22bd553372a29f6e155ebfc8e76f148a56ddf847c4bec65cb45dfeda3428.exe File created C:\Program Files (x86)\BraveSoftware\Temp\GUM1D47.tmp\BraveUpdateComRegisterShell64.exe 2d4d22bd553372a29f6e155ebfc8e76f148a56ddf847c4bec65cb45dfeda3428.exe File created C:\Program Files (x86)\BraveSoftware\Temp\GUM1D47.tmp\psmachine_arm64.dll 2d4d22bd553372a29f6e155ebfc8e76f148a56ddf847c4bec65cb45dfeda3428.exe File created C:\Program Files (x86)\BraveSoftware\Temp\GUM1D47.tmp\psuser_arm64.dll 2d4d22bd553372a29f6e155ebfc8e76f148a56ddf847c4bec65cb45dfeda3428.exe File created C:\Program Files (x86)\BraveSoftware\Temp\GUM1D47.tmp\goopdateres_lv.dll 2d4d22bd553372a29f6e155ebfc8e76f148a56ddf847c4bec65cb45dfeda3428.exe File created C:\Program Files (x86)\BraveSoftware\Temp\GUM1D47.tmp\goopdateres_it.dll 2d4d22bd553372a29f6e155ebfc8e76f148a56ddf847c4bec65cb45dfeda3428.exe File created C:\Program Files (x86)\BraveSoftware\Temp\GUM1D47.tmp\goopdateres_lt.dll 2d4d22bd553372a29f6e155ebfc8e76f148a56ddf847c4bec65cb45dfeda3428.exe File created C:\Program Files (x86)\BraveSoftware\Temp\GUM1D47.tmp\goopdateres_nl.dll 2d4d22bd553372a29f6e155ebfc8e76f148a56ddf847c4bec65cb45dfeda3428.exe File created C:\Program Files (x86)\BraveSoftware\Temp\GUM1D47.tmp\goopdateres_pt-BR.dll 2d4d22bd553372a29f6e155ebfc8e76f148a56ddf847c4bec65cb45dfeda3428.exe File created C:\Program Files (x86)\BraveSoftware\Temp\GUM1D47.tmp\goopdate.dll 2d4d22bd553372a29f6e155ebfc8e76f148a56ddf847c4bec65cb45dfeda3428.exe File created C:\Program Files (x86)\BraveSoftware\Temp\GUM1D47.tmp\goopdateres_am.dll 2d4d22bd553372a29f6e155ebfc8e76f148a56ddf847c4bec65cb45dfeda3428.exe File created C:\Program Files (x86)\BraveSoftware\Temp\GUM1D47.tmp\goopdateres_ar.dll 2d4d22bd553372a29f6e155ebfc8e76f148a56ddf847c4bec65cb45dfeda3428.exe File created C:\Program Files (x86)\BraveSoftware\Temp\GUM1D47.tmp\goopdateres_bn.dll 2d4d22bd553372a29f6e155ebfc8e76f148a56ddf847c4bec65cb45dfeda3428.exe File created C:\Program Files (x86)\BraveSoftware\Temp\GUM1D47.tmp\goopdateres_sw.dll 2d4d22bd553372a29f6e155ebfc8e76f148a56ddf847c4bec65cb45dfeda3428.exe File created C:\Program Files (x86)\BraveSoftware\Temp\GUM1D47.tmp\goopdateres_ur.dll 2d4d22bd553372a29f6e155ebfc8e76f148a56ddf847c4bec65cb45dfeda3428.exe File created C:\Program Files (x86)\BraveSoftware\Temp\GUM1D47.tmp\goopdateres_tr.dll 2d4d22bd553372a29f6e155ebfc8e76f148a56ddf847c4bec65cb45dfeda3428.exe File created C:\Program Files (x86)\BraveSoftware\Temp\GUM1D47.tmp\BraveCrashHandler64.exe 2d4d22bd553372a29f6e155ebfc8e76f148a56ddf847c4bec65cb45dfeda3428.exe File created C:\Program Files (x86)\BraveSoftware\Temp\GUM1D47.tmp\goopdateres_en.dll 2d4d22bd553372a29f6e155ebfc8e76f148a56ddf847c4bec65cb45dfeda3428.exe