Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
21s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
31/12/2023, 02:10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
24004bd6124413874d6b6f6e8ccc9c7b.exe
Resource
win7-20231129-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
24004bd6124413874d6b6f6e8ccc9c7b.exe
Resource
win10v2004-20231222-en
1 signatures
150 seconds
General
-
Target
24004bd6124413874d6b6f6e8ccc9c7b.exe
-
Size
76KB
-
MD5
24004bd6124413874d6b6f6e8ccc9c7b
-
SHA1
4e279f727ad7fbfc81f8ecf1a4c7c3232ce08757
-
SHA256
3ac1c145ab70b244ba3e4037df2678116a0ffd4ce2a030fc50d81b4098332094
-
SHA512
5f5f22a309bbfac47d111eec7f9e7bff171ea08182016188ad1a637dac4cece947b62b316ad163d7b30be83645d6b6b514335f9731e41340e1382d439e94375c
-
SSDEEP
1536:djnUl8BNth6X0U9tw1oU+sGRPkBujEErxTWDTMqhGKYIZTET8x:VnUO3to0SEoU+sycAjBkMqhGKZTbx
Score
1/10
Malware Config
Signatures
-
Modifies registry class 4 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{01C3538D-697B-0B37-BE53-C72C3F69F7D9}\LocalServer32 24004bd6124413874d6b6f6e8ccc9c7b.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{01C3538D-697B-0B37-BE53-C72C3F69F7D9}\LocalServer32\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\24004bd6124413874d6b6f6e8ccc9c7b.exe" 24004bd6124413874d6b6f6e8ccc9c7b.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{01C3538D-697B-0B37-BE53-C72C3F69F7D9} 24004bd6124413874d6b6f6e8ccc9c7b.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{01C3538D-697B-0B37-BE53-C72C3F69F7D9}\ = "qzzjbhjjlnhjqssj" 24004bd6124413874d6b6f6e8ccc9c7b.exe