Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
168s -
max time network
175s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
25/12/2023, 15:42
Behavioral task
behavioral1
Sample
2a22ce8fb42a0de3ae40ca317950b60f.exe
Resource
win7-20231129-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2a22ce8fb42a0de3ae40ca317950b60f.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
2a22ce8fb42a0de3ae40ca317950b60f.exe
-
Size
1.8MB
-
MD5
2a22ce8fb42a0de3ae40ca317950b60f
-
SHA1
f00910209cfe661356f04d3d5154c9aeb13ee4f2
-
SHA256
a087b2ff8d76d1d346148c7eb7084bdd94b95b0af7578617085ff324cac61e9c
-
SHA512
5378c499ba3a7a7e1e6b34b2b8cf7aa8d0f383e69934176329e593cb1d660b312bebc503065a641b2ff429982c9b8157b5ea57b7737e643f425454518d9a2b62
-
SSDEEP
24576:S6pQPxQ2JyP2r5mJV91xM7RpbwgIvs7NxqUkHw:SCqm2Jpr0nNM7Dus7Nx2Q
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/4960-0-0x0000000000400000-0x00000000005BA000-memory.dmp upx behavioral2/files/0x00020000000227a8-5.dat upx behavioral2/memory/4960-690-0x0000000000400000-0x00000000005BA000-memory.dmp upx -
Drops file in Program Files directory 64 IoCs
description ioc Process File opened for modification C:\Program Files\7-Zip\Lang\sl.txt 2a22ce8fb42a0de3ae40ca317950b60f.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVClient.man 2a22ce8fb42a0de3ae40ca317950b60f.exe File created C:\Program Files\Java\jdk-1.8\jre\bin\java-rmi.exe.exe 2a22ce8fb42a0de3ae40ca317950b60f.exe File created C:\Program Files\Common Files\microsoft shared\VSTO\10.0\1033\VSTOLoaderUI.dll.exe 2a22ce8fb42a0de3ae40ca317950b60f.exe File opened for modification C:\Program Files\Microsoft Office\root\Client\api-ms-win-core-processthreads-l1-1-1.dll 2a22ce8fb42a0de3ae40ca317950b60f.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\README.txt 2a22ce8fb42a0de3ae40ca317950b60f.exe File created C:\Program Files\Java\jre-1.8\bin\java.exe.exe 2a22ce8fb42a0de3ae40ca317950b60f.exe File opened for modification C:\Program Files\Java\jre-1.8\legal\jdk\xmlresolver.md 2a22ce8fb42a0de3ae40ca317950b60f.exe File created C:\Program Files\Common Files\microsoft shared\VC\msdia100.dll.exe 2a22ce8fb42a0de3ae40ca317950b60f.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\ktab.exe 2a22ce8fb42a0de3ae40ca317950b60f.exe File created C:\Program Files\Java\jdk-1.8\jre\lib\images\cursors\win32_MoveDrop32x32.gif.exe 2a22ce8fb42a0de3ae40ca317950b60f.exe File created C:\Program Files\Java\jre-1.8\lib\fontconfig.bfc.exe 2a22ce8fb42a0de3ae40ca317950b60f.exe File created C:\Program Files\Common Files\System\Ole DB\es-ES\msdasqlr.dll.mui.exe 2a22ce8fb42a0de3ae40ca317950b60f.exe File created C:\Program Files\Common Files\System\ado\msado27.tlb 2a22ce8fb42a0de3ae40ca317950b60f.exe File created C:\Program Files\Java\jdk-1.8\jmc.txt.exe 2a22ce8fb42a0de3ae40ca317950b60f.exe File opened for modification C:\Program Files\Java\jdk-1.8\legal\jdk\bcel.md 2a22ce8fb42a0de3ae40ca317950b60f.exe File created C:\Program Files\Java\jre-1.8\bin\npt.dll.exe 2a22ce8fb42a0de3ae40ca317950b60f.exe File created C:\Program Files\Common Files\System\msadc\msdfmap.dll 2a22ce8fb42a0de3ae40ca317950b60f.exe File created C:\Program Files\Common Files\microsoft shared\ink\da-DK\tipresx.dll.mui 2a22ce8fb42a0de3ae40ca317950b60f.exe File created C:\Program Files\Common Files\microsoft shared\ink\ro-RO\tipresx.dll.mui 2a22ce8fb42a0de3ae40ca317950b60f.exe File opened for modification C:\Program Files\7-Zip\7zFM.exe 2a22ce8fb42a0de3ae40ca317950b60f.exe File created C:\Program Files\Internet Explorer\ielowutil.exe.exe 2a22ce8fb42a0de3ae40ca317950b60f.exe File created C:\Program Files\Java\jdk-1.8\bin\api-ms-win-crt-math-l1-1-0.dll.exe 2a22ce8fb42a0de3ae40ca317950b60f.exe File created C:\Program Files\Java\jdk-1.8\jre\lib\cmm\sRGB.pf.exe 2a22ce8fb42a0de3ae40ca317950b60f.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\jsoundds.dll 2a22ce8fb42a0de3ae40ca317950b60f.exe File created C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml.exe 2a22ce8fb42a0de3ae40ca317950b60f.exe File created C:\Program Files\Java\jdk-1.8\include\jvmti.h.exe 2a22ce8fb42a0de3ae40ca317950b60f.exe File opened for modification C:\Program Files\Java\jre-1.8\lib\ext\nashorn.jar 2a22ce8fb42a0de3ae40ca317950b60f.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\lib\ext\access-bridge-64.jar 2a22ce8fb42a0de3ae40ca317950b60f.exe File opened for modification C:\Program Files\Java\jre-1.8\lib\ext\sunjce_provider.jar 2a22ce8fb42a0de3ae40ca317950b60f.exe File created C:\Program Files\Java\jdk-1.8\jre\bin\javaw.exe.exe 2a22ce8fb42a0de3ae40ca317950b60f.exe File created C:\Program Files\Java\jre-1.8\legal\jdk\jpeg.md.exe 2a22ce8fb42a0de3ae40ca317950b60f.exe File created C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Fonts\Consolas-Verdana.xml.exe 2a22ce8fb42a0de3ae40ca317950b60f.exe File opened for modification C:\Program Files\Java\jdk-1.8\include\classfile_constants.h 2a22ce8fb42a0de3ae40ca317950b60f.exe File created C:\Program Files\Java\jre-1.8\bin\dtplugin\npdeployJava1.dll.exe 2a22ce8fb42a0de3ae40ca317950b60f.exe File opened for modification C:\Program Files\Google\Chrome\Application\106.0.5249.119\VisualElements\LogoCanary.png 2a22ce8fb42a0de3ae40ca317950b60f.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\msvcp140.dll 2a22ce8fb42a0de3ae40ca317950b60f.exe File created C:\Program Files\Java\jre-1.8\bin\vcruntime140.dll.exe 2a22ce8fb42a0de3ae40ca317950b60f.exe File created C:\Program Files\Common Files\microsoft shared\ink\es-ES\TabTip.exe.mui.exe 2a22ce8fb42a0de3ae40ca317950b60f.exe File created C:\Program Files\Java\jre-1.8\lib\ext\jfxrt.jar.exe 2a22ce8fb42a0de3ae40ca317950b60f.exe File opened for modification C:\Program Files\7-Zip\Lang\ku.txt 2a22ce8fb42a0de3ae40ca317950b60f.exe File created C:\Program Files\Java\jdk-1.8\include\jdwpTransport.h.exe 2a22ce8fb42a0de3ae40ca317950b60f.exe File created C:\Program Files\Java\jdk-1.8\lib\deployment.config.exe 2a22ce8fb42a0de3ae40ca317950b60f.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\j2pkcs11.dll 2a22ce8fb42a0de3ae40ca317950b60f.exe File created C:\Program Files\Common Files\System\ado\msador28.tlb 2a22ce8fb42a0de3ae40ca317950b60f.exe File created C:\Program Files\Common Files\System\msadc\es-ES\msdaprsr.dll.mui 2a22ce8fb42a0de3ae40ca317950b60f.exe File created C:\Program Files\Java\jre-1.8\bin\j2pcsc.dll.exe 2a22ce8fb42a0de3ae40ca317950b60f.exe File created C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Colors\Blue Warm.xml.exe 2a22ce8fb42a0de3ae40ca317950b60f.exe File opened for modification C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Effects\Smokey Glass.eftx 2a22ce8fb42a0de3ae40ca317950b60f.exe File created C:\Program Files\Common Files\microsoft shared\ink\es-ES\tabskb.dll.mui.exe 2a22ce8fb42a0de3ae40ca317950b60f.exe File opened for modification C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\te.pak 2a22ce8fb42a0de3ae40ca317950b60f.exe File opened for modification C:\Program Files\Google\Chrome\Application\106.0.5249.119\chrome.dll.sig 2a22ce8fb42a0de3ae40ca317950b60f.exe File created C:\Program Files\Java\jdk-1.8\bin\msvcp140.dll.exe 2a22ce8fb42a0de3ae40ca317950b60f.exe File opened for modification C:\Program Files\Java\jre-1.8\lib\deploy\messages_zh_TW.properties 2a22ce8fb42a0de3ae40ca317950b60f.exe File created C:\Program Files\Java\jre-1.8\lib\ext\dnsns.jar.exe 2a22ce8fb42a0de3ae40ca317950b60f.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-handle-l1-1-0.dll 2a22ce8fb42a0de3ae40ca317950b60f.exe File created C:\Program Files\Java\jdk-1.8\jre\bin\java.dll.exe 2a22ce8fb42a0de3ae40ca317950b60f.exe File opened for modification C:\Program Files\Microsoft Office\ThinAppXManifest.xml 2a22ce8fb42a0de3ae40ca317950b60f.exe File created C:\Program Files\Common Files\microsoft shared\ink\ipshi.xml.exe 2a22ce8fb42a0de3ae40ca317950b60f.exe File created C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-multibyte-l1-1-0.dll.exe 2a22ce8fb42a0de3ae40ca317950b60f.exe File created C:\Program Files\Java\jdk-1.8\jre\bin\jabswitch.exe.exe 2a22ce8fb42a0de3ae40ca317950b60f.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-handle-l1-1-0.dll 2a22ce8fb42a0de3ae40ca317950b60f.exe File created C:\Program Files\Microsoft Office\PackageManifests\AuthoredExtensions.16.xml.exe 2a22ce8fb42a0de3ae40ca317950b60f.exe File created C:\Program Files\Java\jdk-1.8\jre\bin\javacpl.cpl.exe 2a22ce8fb42a0de3ae40ca317950b60f.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.8MB
MD504cbeb98d22d3a54f986f0deeda6deef
SHA1fbd7ea966f232c5de3d861f520d581d47276a59f
SHA25661a9a3a7f299d8033d9f9f56cb52882287fdb386968a6dd8951d25bf0c120d15
SHA51252ed1c2a8678c4030b8b9a7f68b1d05b3ceea460fb7ee4397c84dd85ad373ca16788c4a9c5410121f963113f01830f6a140d740230757a6bef055ea91223da2a