Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
144s -
max time network
136s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
29/12/2023, 04:08
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
d2efe05be6f2b0b0674f957e4a5373320ae205662fae2ba73ed8f31e7800279c.exe
Resource
win7-20231215-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
d2efe05be6f2b0b0674f957e4a5373320ae205662fae2ba73ed8f31e7800279c.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
3 signatures
150 seconds
General
-
Target
d2efe05be6f2b0b0674f957e4a5373320ae205662fae2ba73ed8f31e7800279c.exe
-
Size
2.3MB
-
MD5
6a14f5679861dae69bb9c10cd2058d41
-
SHA1
90480ac1769e742414e26760c3a1fbc1080f7bea
-
SHA256
d2efe05be6f2b0b0674f957e4a5373320ae205662fae2ba73ed8f31e7800279c
-
SHA512
ecc7e4686d3583ff7f9296758ff8c00c1a7fc65d4ee3556f9a6272ba6d6984baf193bd7c876b50447d5bcd8b3b6b74dbeb99260f92e5c1da2f72489c0d56674c
-
SSDEEP
49152:e6VzaxrwgBrjTWTfcjSuIYP49sE2+vDyXfGz87:e65axrFBrjTWTfcOyE2
Score
4/10
Malware Config
Signatures
-
Drops file in Program Files directory 37 IoCs
description ioc Process File created C:\Program Files (x86)\imyfone_down\d2efe05be6f2b0b0674f957e4a5373320ae205662fae2ba73ed8f31e7800279c\language\Indonesian\UrlInfo.ini d2efe05be6f2b0b0674f957e4a5373320ae205662fae2ba73ed8f31e7800279c.exe File created C:\Program Files (x86)\imyfone_down\d2efe05be6f2b0b0674f957e4a5373320ae205662fae2ba73ed8f31e7800279c\language\Polish\UrlInfo.ini d2efe05be6f2b0b0674f957e4a5373320ae205662fae2ba73ed8f31e7800279c.exe File created C:\Program Files (x86)\imyfone_down\d2efe05be6f2b0b0674f957e4a5373320ae205662fae2ba73ed8f31e7800279c\language\German\text.ini d2efe05be6f2b0b0674f957e4a5373320ae205662fae2ba73ed8f31e7800279c.exe File created C:\Program Files (x86)\imyfone_down\d2efe05be6f2b0b0674f957e4a5373320ae205662fae2ba73ed8f31e7800279c\language\Korean\text.ini d2efe05be6f2b0b0674f957e4a5373320ae205662fae2ba73ed8f31e7800279c.exe File created C:\Program Files (x86)\imyfone_down\d2efe05be6f2b0b0674f957e4a5373320ae205662fae2ba73ed8f31e7800279c\language\ChineseTW\UrlInfo.ini d2efe05be6f2b0b0674f957e4a5373320ae205662fae2ba73ed8f31e7800279c.exe File created C:\Program Files (x86)\imyfone_down\d2efe05be6f2b0b0674f957e4a5373320ae205662fae2ba73ed8f31e7800279c\language\Chinese\UrlInfo.ini d2efe05be6f2b0b0674f957e4a5373320ae205662fae2ba73ed8f31e7800279c.exe File created C:\Program Files (x86)\imyfone_down\d2efe05be6f2b0b0674f957e4a5373320ae205662fae2ba73ed8f31e7800279c\language\language.ini d2efe05be6f2b0b0674f957e4a5373320ae205662fae2ba73ed8f31e7800279c.exe File created C:\Program Files (x86)\imyfone_down\d2efe05be6f2b0b0674f957e4a5373320ae205662fae2ba73ed8f31e7800279c\language\Japanese\UrlInfo.ini d2efe05be6f2b0b0674f957e4a5373320ae205662fae2ba73ed8f31e7800279c.exe File created C:\Program Files (x86)\imyfone_down\d2efe05be6f2b0b0674f957e4a5373320ae205662fae2ba73ed8f31e7800279c\language\Korean\UrlInfo.ini d2efe05be6f2b0b0674f957e4a5373320ae205662fae2ba73ed8f31e7800279c.exe File created C:\Program Files (x86)\imyfone_down\d2efe05be6f2b0b0674f957e4a5373320ae205662fae2ba73ed8f31e7800279c\language\French\text.ini d2efe05be6f2b0b0674f957e4a5373320ae205662fae2ba73ed8f31e7800279c.exe File created C:\Program Files (x86)\imyfone_down\d2efe05be6f2b0b0674f957e4a5373320ae205662fae2ba73ed8f31e7800279c\language\Spanish\UrlInfo.ini d2efe05be6f2b0b0674f957e4a5373320ae205662fae2ba73ed8f31e7800279c.exe File created C:\Program Files (x86)\imyfone_down\d2efe05be6f2b0b0674f957e4a5373320ae205662fae2ba73ed8f31e7800279c\language\Swedish\text.ini d2efe05be6f2b0b0674f957e4a5373320ae205662fae2ba73ed8f31e7800279c.exe File created C:\Program Files (x86)\imyfone_down\d2efe05be6f2b0b0674f957e4a5373320ae205662fae2ba73ed8f31e7800279c\language\Thai\text.ini d2efe05be6f2b0b0674f957e4a5373320ae205662fae2ba73ed8f31e7800279c.exe File created C:\Program Files (x86)\imyfone_down\d2efe05be6f2b0b0674f957e4a5373320ae205662fae2ba73ed8f31e7800279c\language\Arabic\text.ini d2efe05be6f2b0b0674f957e4a5373320ae205662fae2ba73ed8f31e7800279c.exe File created C:\Program Files (x86)\imyfone_down\d2efe05be6f2b0b0674f957e4a5373320ae205662fae2ba73ed8f31e7800279c\language\Dutch\UrlInfo.ini d2efe05be6f2b0b0674f957e4a5373320ae205662fae2ba73ed8f31e7800279c.exe File created C:\Program Files (x86)\imyfone_down\d2efe05be6f2b0b0674f957e4a5373320ae205662fae2ba73ed8f31e7800279c\language\English\text.ini d2efe05be6f2b0b0674f957e4a5373320ae205662fae2ba73ed8f31e7800279c.exe File created C:\Program Files (x86)\imyfone_down\d2efe05be6f2b0b0674f957e4a5373320ae205662fae2ba73ed8f31e7800279c\language\French\UrlInfo.ini d2efe05be6f2b0b0674f957e4a5373320ae205662fae2ba73ed8f31e7800279c.exe File created C:\Program Files (x86)\imyfone_down\d2efe05be6f2b0b0674f957e4a5373320ae205662fae2ba73ed8f31e7800279c\language\German\UrlInfo.ini d2efe05be6f2b0b0674f957e4a5373320ae205662fae2ba73ed8f31e7800279c.exe File created C:\Program Files (x86)\imyfone_down\d2efe05be6f2b0b0674f957e4a5373320ae205662fae2ba73ed8f31e7800279c\language\Italian\UrlInfo.ini d2efe05be6f2b0b0674f957e4a5373320ae205662fae2ba73ed8f31e7800279c.exe File created C:\Program Files (x86)\imyfone_down\d2efe05be6f2b0b0674f957e4a5373320ae205662fae2ba73ed8f31e7800279c\language\Polish\text.ini d2efe05be6f2b0b0674f957e4a5373320ae205662fae2ba73ed8f31e7800279c.exe File created C:\Program Files (x86)\imyfone_down\d2efe05be6f2b0b0674f957e4a5373320ae205662fae2ba73ed8f31e7800279c\language\Swedish\UrlInfo.ini d2efe05be6f2b0b0674f957e4a5373320ae205662fae2ba73ed8f31e7800279c.exe File opened for modification C:\Program Files (x86)\imyfone_down\d2efe05be6f2b0b0674f957e4a5373320ae205662fae2ba73ed8f31e7800279c\Log\imyfone_down.log d2efe05be6f2b0b0674f957e4a5373320ae205662fae2ba73ed8f31e7800279c.exe File created C:\Program Files (x86)\imyfone_down\d2efe05be6f2b0b0674f957e4a5373320ae205662fae2ba73ed8f31e7800279c\language\Arabic\UrlInfo.ini d2efe05be6f2b0b0674f957e4a5373320ae205662fae2ba73ed8f31e7800279c.exe File created C:\Program Files (x86)\imyfone_down\d2efe05be6f2b0b0674f957e4a5373320ae205662fae2ba73ed8f31e7800279c\language\Portuguese\UrlInfo.ini d2efe05be6f2b0b0674f957e4a5373320ae205662fae2ba73ed8f31e7800279c.exe File created C:\Program Files (x86)\imyfone_down\d2efe05be6f2b0b0674f957e4a5373320ae205662fae2ba73ed8f31e7800279c\language\productInfo.ini d2efe05be6f2b0b0674f957e4a5373320ae205662fae2ba73ed8f31e7800279c.exe File created C:\Program Files (x86)\imyfone_down\d2efe05be6f2b0b0674f957e4a5373320ae205662fae2ba73ed8f31e7800279c\language\Thai\UrlInfo.ini d2efe05be6f2b0b0674f957e4a5373320ae205662fae2ba73ed8f31e7800279c.exe File created C:\Program Files (x86)\imyfone_down\d2efe05be6f2b0b0674f957e4a5373320ae205662fae2ba73ed8f31e7800279c\language\English\UrlInfo.ini d2efe05be6f2b0b0674f957e4a5373320ae205662fae2ba73ed8f31e7800279c.exe File created C:\Program Files (x86)\imyfone_down\d2efe05be6f2b0b0674f957e4a5373320ae205662fae2ba73ed8f31e7800279c\language\Portuguese\text.ini d2efe05be6f2b0b0674f957e4a5373320ae205662fae2ba73ed8f31e7800279c.exe File created C:\Program Files (x86)\imyfone_down\d2efe05be6f2b0b0674f957e4a5373320ae205662fae2ba73ed8f31e7800279c\language\Malaysian\text.ini d2efe05be6f2b0b0674f957e4a5373320ae205662fae2ba73ed8f31e7800279c.exe File created C:\Program Files (x86)\imyfone_down\d2efe05be6f2b0b0674f957e4a5373320ae205662fae2ba73ed8f31e7800279c\language\Chinese\text.ini d2efe05be6f2b0b0674f957e4a5373320ae205662fae2ba73ed8f31e7800279c.exe File created C:\Program Files (x86)\imyfone_down\d2efe05be6f2b0b0674f957e4a5373320ae205662fae2ba73ed8f31e7800279c\language\Italian\text.ini d2efe05be6f2b0b0674f957e4a5373320ae205662fae2ba73ed8f31e7800279c.exe File created C:\Program Files (x86)\imyfone_down\d2efe05be6f2b0b0674f957e4a5373320ae205662fae2ba73ed8f31e7800279c\language\Indonesian\text.ini d2efe05be6f2b0b0674f957e4a5373320ae205662fae2ba73ed8f31e7800279c.exe File created C:\Program Files (x86)\imyfone_down\d2efe05be6f2b0b0674f957e4a5373320ae205662fae2ba73ed8f31e7800279c\language\Japanese\text.ini d2efe05be6f2b0b0674f957e4a5373320ae205662fae2ba73ed8f31e7800279c.exe File created C:\Program Files (x86)\imyfone_down\d2efe05be6f2b0b0674f957e4a5373320ae205662fae2ba73ed8f31e7800279c\language\Malaysian\UrlInfo.ini d2efe05be6f2b0b0674f957e4a5373320ae205662fae2ba73ed8f31e7800279c.exe File created C:\Program Files (x86)\imyfone_down\d2efe05be6f2b0b0674f957e4a5373320ae205662fae2ba73ed8f31e7800279c\language\Spanish\text.ini d2efe05be6f2b0b0674f957e4a5373320ae205662fae2ba73ed8f31e7800279c.exe File created C:\Program Files (x86)\imyfone_down\d2efe05be6f2b0b0674f957e4a5373320ae205662fae2ba73ed8f31e7800279c\language\ChineseTW\text.ini d2efe05be6f2b0b0674f957e4a5373320ae205662fae2ba73ed8f31e7800279c.exe File created C:\Program Files (x86)\imyfone_down\d2efe05be6f2b0b0674f957e4a5373320ae205662fae2ba73ed8f31e7800279c\language\Dutch\text.ini d2efe05be6f2b0b0674f957e4a5373320ae205662fae2ba73ed8f31e7800279c.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 3888 d2efe05be6f2b0b0674f957e4a5373320ae205662fae2ba73ed8f31e7800279c.exe