Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
150s -
max time network
142s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
25/12/2023, 15:15
Behavioral task
behavioral1
Sample
288423b2b674313dff26e9b51941e771.exe
Resource
win7-20231215-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
288423b2b674313dff26e9b51941e771.exe
Resource
win10v2004-20231222-en
windows10-2004-x64
4 signatures
150 seconds
General
-
Target
288423b2b674313dff26e9b51941e771.exe
-
Size
1.8MB
-
MD5
288423b2b674313dff26e9b51941e771
-
SHA1
de92e00fdae6fd73c1140d45df5dfb647f49f411
-
SHA256
31fd6611b1e928487146922472db87b5ff2dfff4a2aa9c4509d5ad975560f81a
-
SHA512
dea6b39b56c7b83cc77a0e037e366df23f561dbafb08cc8a9505701b0bd7feb68c007296a2b5bc7f14065e510c8d160b329504d8d6e8f5e422f601fc1c00d5af
-
SSDEEP
24576:S6pQPxQ2JyP2r5mJV91xM7RpbwgIvs7NxqX:SCqm2Jpr0nNM7Dus7Nxq
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/2432-0-0x0000000000400000-0x00000000005BA000-memory.dmp upx behavioral1/files/0x0035000000015da6-5.dat upx behavioral1/memory/2432-288-0x0000000000400000-0x00000000005BA000-memory.dmp upx -
Drops desktop.ini file(s) 1 IoCs
description ioc Process File created C:\Program Files\Common Files\Microsoft Shared\Stationery\Desktop.ini 288423b2b674313dff26e9b51941e771.exe -
Drops file in Program Files directory 64 IoCs
description ioc Process File opened for modification C:\Program Files\7-Zip\7z.exe 288423b2b674313dff26e9b51941e771.exe File created C:\Program Files\Internet Explorer\perf_nt.dll 288423b2b674313dff26e9b51941e771.exe File created C:\Program Files\DVD Maker\SecretST.TTF 288423b2b674313dff26e9b51941e771.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsNotesBackground.wmv.exe 288423b2b674313dff26e9b51941e771.exe File created C:\Program Files\Common Files\Microsoft Shared\Stationery\Peacock.htm 288423b2b674313dff26e9b51941e771.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\lt-LT\tipresx.dll.mui 288423b2b674313dff26e9b51941e771.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\uk-UA\tipresx.dll.mui.exe 288423b2b674313dff26e9b51941e771.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Title_Trans_Scene_PAL.wmv 288423b2b674313dff26e9b51941e771.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_image-frame-backglow.png.exe 288423b2b674313dff26e9b51941e771.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Vignette\15x15dot.png 288423b2b674313dff26e9b51941e771.exe File created C:\Program Files\Internet Explorer\ieproxy.dll 288423b2b674313dff26e9b51941e771.exe File created C:\Program Files\Java\jdk1.7.0_80\bin\ktab.exe.exe 288423b2b674313dff26e9b51941e771.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\de-DE\mip.exe.mui.exe 288423b2b674313dff26e9b51941e771.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\es-ES\rtscom.dll.mui.exe 288423b2b674313dff26e9b51941e771.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\en-US\TipBand.dll.mui.exe 288423b2b674313dff26e9b51941e771.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\th-TH\tipresx.dll.mui 288423b2b674313dff26e9b51941e771.exe File created C:\Program Files\DVD Maker\Shared\DissolveAnother.png 288423b2b674313dff26e9b51941e771.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\16to9Squareframe_SelectionSubpicture.png 288423b2b674313dff26e9b51941e771.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyMainToNotesBackground_PAL.wmv 288423b2b674313dff26e9b51941e771.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Full\1047x576black.png.exe 288423b2b674313dff26e9b51941e771.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\NavigationLeft_ButtonGraphic.png 288423b2b674313dff26e9b51941e771.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\sports_disc_mask.png 288423b2b674313dff26e9b51941e771.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\ko-kr.xml.exe 288423b2b674313dff26e9b51941e771.exe File created C:\Program Files\Common Files\System\ado\msadrh15.dll.exe 288423b2b674313dff26e9b51941e771.exe File created C:\Program Files\DVD Maker\de-DE\DVDMaker.exe.mui 288423b2b674313dff26e9b51941e771.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\en-US\split.avi 288423b2b674313dff26e9b51941e771.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\ipssrl.xml 288423b2b674313dff26e9b51941e771.exe File created C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS20\ja-JP\MSTTSLoc.dll.mui.exe 288423b2b674313dff26e9b51941e771.exe File created C:\Program Files\Common Files\System\Ole DB\msxactps.dll.exe 288423b2b674313dff26e9b51941e771.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\curtains.png.exe 288423b2b674313dff26e9b51941e771.exe File created C:\Program Files\Common Files\Microsoft Shared\Stationery\Peacock.htm.exe 288423b2b674313dff26e9b51941e771.exe File created C:\Program Files\Common Files\Microsoft Shared\VC\msdia100.dll.exe 288423b2b674313dff26e9b51941e771.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\ipsplk.xml.exe 288423b2b674313dff26e9b51941e771.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\TravelIntroToMainMask_PAL.wmv 288423b2b674313dff26e9b51941e771.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\db\lib\derbyLocale_hu.jar 288423b2b674313dff26e9b51941e771.exe File created C:\Program Files\Common Files\Microsoft Shared\Stationery\Wrinkled_Paper.gif 288423b2b674313dff26e9b51941e771.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\IPSEventLogMsg.dll.exe 288423b2b674313dff26e9b51941e771.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\flower_trans_MATTE_PAL.wmv 288423b2b674313dff26e9b51941e771.exe File created C:\Program Files\Google\Chrome\Application\106.0.5249.119\mojo_core.dll.exe 288423b2b674313dff26e9b51941e771.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\db\lib\derbynet.jar 288423b2b674313dff26e9b51941e771.exe File created C:\Program Files\7-Zip\Lang\sv.txt.exe 288423b2b674313dff26e9b51941e771.exe File created C:\Program Files\Common Files\System\msadc\de-DE\msadcor.dll.mui 288423b2b674313dff26e9b51941e771.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\ja-JP\TipTsf.dll.mui 288423b2b674313dff26e9b51941e771.exe File created C:\Program Files\Common Files\System\msadc\de-DE\msaddsr.dll.mui.exe 288423b2b674313dff26e9b51941e771.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\16to9Squareframe_VideoInset.png.exe 288423b2b674313dff26e9b51941e771.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\Memories_buttonClear.png.exe 288423b2b674313dff26e9b51941e771.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\NavigationLeft_ButtonGraphic.png.exe 288423b2b674313dff26e9b51941e771.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\shadowonlyframe_selectionsubpicture.png.exe 288423b2b674313dff26e9b51941e771.exe File opened for modification C:\Program Files\7-Zip\Lang\ba.txt 288423b2b674313dff26e9b51941e771.exe File opened for modification C:\Program Files\7-Zip\Lang\es.txt 288423b2b674313dff26e9b51941e771.exe File created C:\Program Files\Internet Explorer\en-US\F12Resources.dll.mui 288423b2b674313dff26e9b51941e771.exe File created C:\Program Files\DVD Maker\en-US\OmdProject.dll.mui 288423b2b674313dff26e9b51941e771.exe File opened for modification C:\Program Files\Google\Chrome\Application\106.0.5249.119\libGLESv2.dll 288423b2b674313dff26e9b51941e771.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\4to3Squareframe_Buttongraphic.png.exe 288423b2b674313dff26e9b51941e771.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Heart_VideoInset.png.exe 288423b2b674313dff26e9b51941e771.exe File opened for modification C:\Program Files\Google\Chrome\Application\106.0.5249.119\chrome_pwa_launcher.exe 288423b2b674313dff26e9b51941e771.exe File created C:\Program Files\Common Files\Microsoft Shared\Stationery\Genko_2.emf.exe 288423b2b674313dff26e9b51941e771.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\InkObj.dll.exe 288423b2b674313dff26e9b51941e771.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\lt-LT\tipresx.dll.mui.exe 288423b2b674313dff26e9b51941e771.exe File created C:\Program Files\DVD Maker\es-ES\DVDMaker.exe.mui 288423b2b674313dff26e9b51941e771.exe File created C:\Program Files\DVD Maker\fr-FR\OmdProject.dll.mui.exe 288423b2b674313dff26e9b51941e771.exe File created C:\Program Files\Internet Explorer\jsdebuggeride.dll 288423b2b674313dff26e9b51941e771.exe File opened for modification C:\Program Files\7-Zip\Lang\sw.txt 288423b2b674313dff26e9b51941e771.exe File created C:\Program Files\BackupSearch.xlsm.exe 288423b2b674313dff26e9b51941e771.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.3MB
MD5ceffdabbd313e0266a50cdfb37bf1991
SHA14fbc0d6c6e0602eef92d607b83a8d298f2249c5e
SHA256aab92c21ca86c21af60aea333d9c3bea8c8be0b2be3c40bacc715b2695bd1eff
SHA512e85a483691d9ffedb01fa8a07821860b043508432af23aae7492f8234461033ec2a111edf5d256729def1800499b66654f55518303d89a94866bf986f96127f9