Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
117s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
30/12/2023, 21:35
Behavioral task
behavioral1
Sample
1d2bb4357dce4f0aac85db232d5fdb38.exe
Resource
win7-20231129-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
1d2bb4357dce4f0aac85db232d5fdb38.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
1d2bb4357dce4f0aac85db232d5fdb38.exe
-
Size
2.0MB
-
MD5
1d2bb4357dce4f0aac85db232d5fdb38
-
SHA1
0c4371d4118ee9a7821c409a1f520a6d6fbd4573
-
SHA256
e2bc828b7756e7ac1d66e7b386f45e52ee2e1de28729334d05fbd4b39bdc9871
-
SHA512
c97a6d0bb6729d6b44c061782e5a95267445e6fbf289c494b54757e0b4114629136dcdcf25fa7818250b8038d8307ae39e5ffa955ef47e0778aab6692fd818c8
-
SSDEEP
24576:S6pQPxQ2JyP2r5mJV91xM7RpbwgIvs7NxqUkHE6pQPj:SCqm2Jpr0nNM7Dus7Nx2kCqj
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/3036-0-0x0000000000400000-0x00000000005BA000-memory.dmp upx behavioral1/memory/3036-2160-0x0000000000400000-0x00000000005BA000-memory.dmp upx behavioral1/memory/3036-9195-0x0000000000400000-0x00000000005BA000-memory.dmp upx -
Drops desktop.ini file(s) 9 IoCs
description ioc Process File created C:\Program Files\Microsoft Games\Purble Place\desktop.ini 1d2bb4357dce4f0aac85db232d5fdb38.exe File created C:\Program Files\Microsoft Games\Solitaire\desktop.ini 1d2bb4357dce4f0aac85db232d5fdb38.exe File created C:\Program Files\Microsoft Games\SpiderSolitaire\desktop.ini 1d2bb4357dce4f0aac85db232d5fdb38.exe File created C:\Program Files\desktop.ini 1d2bb4357dce4f0aac85db232d5fdb38.exe File created C:\Program Files\Microsoft Games\Chess\desktop.ini 1d2bb4357dce4f0aac85db232d5fdb38.exe File created C:\Program Files\Microsoft Games\Mahjong\desktop.ini 1d2bb4357dce4f0aac85db232d5fdb38.exe File created C:\Program Files\Microsoft Games\Hearts\desktop.ini 1d2bb4357dce4f0aac85db232d5fdb38.exe File created C:\Program Files\Common Files\Microsoft Shared\Stationery\Desktop.ini 1d2bb4357dce4f0aac85db232d5fdb38.exe File created C:\Program Files\Microsoft Games\FreeCell\desktop.ini 1d2bb4357dce4f0aac85db232d5fdb38.exe -
Drops file in Program Files directory 64 IoCs
description ioc Process File created C:\Program Files\Windows Media Player\Network Sharing\wmpnss_color120.png 1d2bb4357dce4f0aac85db232d5fdb38.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\osknumpad\osknumpadbase.xml 1d2bb4357dce4f0aac85db232d5fdb38.exe File created C:\Program Files\Common Files\System\ja-JP\wab32res.dll.mui 1d2bb4357dce4f0aac85db232d5fdb38.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\win7TSFrame.png 1d2bb4357dce4f0aac85db232d5fdb38.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-jvmstat.xml.exe 1d2bb4357dce4f0aac85db232d5fdb38.exe File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Barbados 1d2bb4357dce4f0aac85db232d5fdb38.exe File created C:\Program Files\VideoLAN\VLC\locale\km\LC_MESSAGES\vlc.mo.exe 1d2bb4357dce4f0aac85db232d5fdb38.exe File created C:\Program Files\Windows Media Player\de-DE\wmpnssui.dll.mui.exe 1d2bb4357dce4f0aac85db232d5fdb38.exe File created C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_corner_bottom_left.png 1d2bb4357dce4f0aac85db232d5fdb38.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\16to9Squareframe_Buttongraphic.png.exe 1d2bb4357dce4f0aac85db232d5fdb38.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\javaws.jar 1d2bb4357dce4f0aac85db232d5fdb38.exe File created C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\18.png.exe 1d2bb4357dce4f0aac85db232d5fdb38.exe File opened for modification C:\Program Files\Java\jre7\lib\javafx.properties 1d2bb4357dce4f0aac85db232d5fdb38.exe File opened for modification C:\Program Files\Java\jre7\lib\zi\Africa\Nairobi 1d2bb4357dce4f0aac85db232d5fdb38.exe File created C:\Program Files\Windows Media Player\de-DE\wmlaunch.exe.mui.exe 1d2bb4357dce4f0aac85db232d5fdb38.exe File created C:\Program Files\Windows Media Player\de-DE\wmpnssci.dll.mui.exe 1d2bb4357dce4f0aac85db232d5fdb38.exe File created C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\ja-JP\clock.html 1d2bb4357dce4f0aac85db232d5fdb38.exe File created C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\images\Gadget_Flyout_Thumbnail_Shadow.png 1d2bb4357dce4f0aac85db232d5fdb38.exe File created C:\Program Files\Common Files\Microsoft Shared\Stationery\Green Bubbles.htm 1d2bb4357dce4f0aac85db232d5fdb38.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Atlantic\Faroe.exe 1d2bb4357dce4f0aac85db232d5fdb38.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\de-DE\InkWatson.exe.mui 1d2bb4357dce4f0aac85db232d5fdb38.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\bin\jsound.dll.exe 1d2bb4357dce4f0aac85db232d5fdb38.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-autoupdate-cli.jar 1d2bb4357dce4f0aac85db232d5fdb38.exe File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Antigua 1d2bb4357dce4f0aac85db232d5fdb38.exe File created C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\ja\WindowsFormsIntegration.resources.dll.exe 1d2bb4357dce4f0aac85db232d5fdb38.exe File created C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\RedistList\FrameworkList.xml.exe 1d2bb4357dce4f0aac85db232d5fdb38.exe File created C:\Program Files\Windows Media Player\fr-FR\wmlaunch.exe.mui.exe 1d2bb4357dce4f0aac85db232d5fdb38.exe File created C:\Program Files\Windows Media Player\ja-JP\WMPSideShowGadget.exe.mui 1d2bb4357dce4f0aac85db232d5fdb38.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\META-INF\eclipse.inf 1d2bb4357dce4f0aac85db232d5fdb38.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.metadata_2.2.0.v20131211-1531.jar.exe 1d2bb4357dce4f0aac85db232d5fdb38.exe File created C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\en-US\slideShow.html 1d2bb4357dce4f0aac85db232d5fdb38.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.jface.databinding.nl_zh_4.4.0.v20140623020002.jar 1d2bb4357dce4f0aac85db232d5fdb38.exe File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Godthab 1d2bb4357dce4f0aac85db232d5fdb38.exe File opened for modification C:\Program Files\Microsoft Games\Chess\ChessMCE.lnk 1d2bb4357dce4f0aac85db232d5fdb38.exe File created C:\Program Files\Windows Journal\jnwppr.dll 1d2bb4357dce4f0aac85db232d5fdb38.exe File created C:\Program Files\Google\Chrome\Application\106.0.5249.119\WidevineCdm\_platform_specific\win_x64\widevinecdm.dll.exe 1d2bb4357dce4f0aac85db232d5fdb38.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\sunec.dll 1d2bb4357dce4f0aac85db232d5fdb38.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainToScenesBackground_PAL.wmv 1d2bb4357dce4f0aac85db232d5fdb38.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\META-INF\MANIFEST.MF 1d2bb4357dce4f0aac85db232d5fdb38.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.updatechecker.nl_zh_4.4.0.v20140623020002.jar 1d2bb4357dce4f0aac85db232d5fdb38.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\Title_select-highlight.png.exe 1d2bb4357dce4f0aac85db232d5fdb38.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Perf_Scenes_Subpicture1.png.exe 1d2bb4357dce4f0aac85db232d5fdb38.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-sampler.xml.exe 1d2bb4357dce4f0aac85db232d5fdb38.exe File created C:\Program Files\VideoLAN\VLC\locale\ug\LC_MESSAGES\vlc.mo.exe 1d2bb4357dce4f0aac85db232d5fdb38.exe File created C:\Program Files\Windows Defender\es-ES\MpEvMsg.dll.mui 1d2bb4357dce4f0aac85db232d5fdb38.exe File created C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\images\curl-hot.png.exe 1d2bb4357dce4f0aac85db232d5fdb38.exe File created C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\27.png.exe 1d2bb4357dce4f0aac85db232d5fdb38.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Circle_SelectionSubpictureA.png 1d2bb4357dce4f0aac85db232d5fdb38.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.feature_1.1.0.v20140827-1444\feature.xml 1d2bb4357dce4f0aac85db232d5fdb38.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.css.swt.theme_0.9.300.v20140424-2042.jar 1d2bb4357dce4f0aac85db232d5fdb38.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\gtkTSFrame.png.exe 1d2bb4357dce4f0aac85db232d5fdb38.exe File created C:\Program Files\Java\jre7\bin\jp2ssv.dll.exe 1d2bb4357dce4f0aac85db232d5fdb38.exe File created C:\Program Files\VideoLAN\VLC\lua\http\requests\vlm_cmd.xml.exe 1d2bb4357dce4f0aac85db232d5fdb38.exe File created C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\ja-JP\css\slideShow.css.exe 1d2bb4357dce4f0aac85db232d5fdb38.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\it-IT\IPSEventLogMsg.dll.mui 1d2bb4357dce4f0aac85db232d5fdb38.exe File created C:\Program Files\Java\jdk1.7.0_80\include\win32\bridge\AccessBridgeCallbacks.h.exe 1d2bb4357dce4f0aac85db232d5fdb38.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Atlantic\South_Georgia 1d2bb4357dce4f0aac85db232d5fdb38.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.feature_3.9.0.v20140827-1444\license.html 1d2bb4357dce4f0aac85db232d5fdb38.exe File created C:\Program Files\VideoLAN\VLC\lua\http\vlm.html.exe 1d2bb4357dce4f0aac85db232d5fdb38.exe File created C:\Program Files\VideoLAN\VLC\plugins\video_filter\libhqdn3d_plugin.dll.exe 1d2bb4357dce4f0aac85db232d5fdb38.exe File created C:\Program Files\Windows Media Player\fr-FR\wmlaunch.exe.mui 1d2bb4357dce4f0aac85db232d5fdb38.exe File created C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_left_disabled.png.exe 1d2bb4357dce4f0aac85db232d5fdb38.exe File created C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\nb.pak.exe 1d2bb4357dce4f0aac85db232d5fdb38.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Africa\Accra 1d2bb4357dce4f0aac85db232d5fdb38.exe