Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
4s -
max time network
10s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
31/12/2023, 02:21
Behavioral task
behavioral1
Sample
24521b80c629898555bf9efdd7f76233.exe
Resource
win7-20231215-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
24521b80c629898555bf9efdd7f76233.exe
Resource
win10v2004-20231222-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
24521b80c629898555bf9efdd7f76233.exe
-
Size
1.8MB
-
MD5
24521b80c629898555bf9efdd7f76233
-
SHA1
f0a58b53f8c77e68ca78f210a181cdaf42c39b68
-
SHA256
ce002689098b02f94ef10bdc78379963e01dd9535d55ba41e25117a78df96e24
-
SHA512
4be0d5df6d0289dd87590679f54f6889180f080e6deb5e52b6b8c6c4978472fa7a6b354bf0c46dff4bec69fc44222f48ba12b76085fd0029550627a3b124fe04
-
SSDEEP
24576:S6pQPxQ2JyP2r5mJV91xM7RpbwgIvs7NxqUkHN:SCqm2Jpr0nNM7Dus7Nx2t
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/1404-0-0x0000000000400000-0x00000000005BA000-memory.dmp upx behavioral2/files/0x00020000000228cc-5.dat upx behavioral2/memory/1404-5273-0x0000000000400000-0x00000000005BA000-memory.dmp upx behavioral2/memory/1404-13387-0x0000000000400000-0x00000000005BA000-memory.dmp upx -
Drops file in Program Files directory 64 IoCs
description ioc Process File opened for modification C:\Program Files\7-Zip\Lang\kaa.txt 24521b80c629898555bf9efdd7f76233.exe File created C:\Program Files\Common Files\System\Ole DB\en-US\sqlxmlx.rll.mui.exe 24521b80c629898555bf9efdd7f76233.exe File created C:\Program Files\Common Files\System\msadc\de-DE\msdaprsr.dll.mui 24521b80c629898555bf9efdd7f76233.exe File created C:\Program Files\Common Files\System\msadc\msadco.dll 24521b80c629898555bf9efdd7f76233.exe File created C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVIsvVirtualization.dll.exe 24521b80c629898555bf9efdd7f76233.exe File created C:\Program Files\Common Files\microsoft shared\ClickToRun\C2R64.dll.exe 24521b80c629898555bf9efdd7f76233.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.he-il.dll 24521b80c629898555bf9efdd7f76233.exe File created C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-core-file-l2-1-0.dll.exe 24521b80c629898555bf9efdd7f76233.exe File created C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-core-synch-l1-2-0.dll.exe 24521b80c629898555bf9efdd7f76233.exe File created C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-time-l1-1-0.dll.exe 24521b80c629898555bf9efdd7f76233.exe File created C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe.exe 24521b80c629898555bf9efdd7f76233.exe File created C:\Program Files\7-Zip\Lang\mng2.txt.exe 24521b80c629898555bf9efdd7f76233.exe File opened for modification C:\Program Files\7-Zip\Lang\uz-cyrl.txt 24521b80c629898555bf9efdd7f76233.exe File created C:\Program Files\Common Files\System\ado\de-DE\msader15.dll.mui.exe 24521b80c629898555bf9efdd7f76233.exe File created C:\Program Files\Common Files\System\fr-FR\wab32res.dll.mui 24521b80c629898555bf9efdd7f76233.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.cs-cz.dll 24521b80c629898555bf9efdd7f76233.exe File created C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.en-us.dll.exe 24521b80c629898555bf9efdd7f76233.exe File created C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.et-ee.dll.exe 24521b80c629898555bf9efdd7f76233.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.ms-my.dll 24521b80c629898555bf9efdd7f76233.exe File opened for modification C:\Program Files\7-Zip\Lang\hr.txt 24521b80c629898555bf9efdd7f76233.exe File opened for modification C:\Program Files\7-Zip\Lang\ko.txt 24521b80c629898555bf9efdd7f76233.exe File created C:\Program Files\7-Zip\Lang\ko.txt.exe 24521b80c629898555bf9efdd7f76233.exe File created C:\Program Files\Common Files\System\Ole DB\oledb32.dll.exe 24521b80c629898555bf9efdd7f76233.exe File created C:\Program Files\Common Files\System\msadc\fr-FR\msadcer.dll.mui 24521b80c629898555bf9efdd7f76233.exe File created C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-multibyte-l1-1-0.dll.exe 24521b80c629898555bf9efdd7f76233.exe File created C:\Program Files\7-Zip\7zG.exe.exe 24521b80c629898555bf9efdd7f76233.exe File opened for modification C:\Program Files\7-Zip\Lang\it.txt 24521b80c629898555bf9efdd7f76233.exe File opened for modification C:\Program Files\7-Zip\Lang\sl.txt 24521b80c629898555bf9efdd7f76233.exe File opened for modification C:\Program Files\7-Zip\Lang\va.txt 24521b80c629898555bf9efdd7f76233.exe File created C:\Program Files\Common Files\microsoft shared\ClickToRun\msvcp120.dll 24521b80c629898555bf9efdd7f76233.exe File opened for modification C:\Program Files\7-Zip\readme.txt 24521b80c629898555bf9efdd7f76233.exe File created C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-conio-l1-1-0.dll.exe 24521b80c629898555bf9efdd7f76233.exe File created C:\Program Files\7-Zip\7z.dll.exe 24521b80c629898555bf9efdd7f76233.exe File opened for modification C:\Program Files\7-Zip\Lang\af.txt 24521b80c629898555bf9efdd7f76233.exe File created C:\Program Files\7-Zip\Lang\br.txt.exe 24521b80c629898555bf9efdd7f76233.exe File created C:\Program Files\7-Zip\Uninstall.exe.exe 24521b80c629898555bf9efdd7f76233.exe File created C:\Program Files\Common Files\System\Ole DB\fr-FR\sqlxmlx.rll.mui 24521b80c629898555bf9efdd7f76233.exe File created C:\Program Files\Common Files\System\ado\msado25.tlb 24521b80c629898555bf9efdd7f76233.exe File created C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVClientIsv.man.exe 24521b80c629898555bf9efdd7f76233.exe File created C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RCom.dll.exe 24521b80c629898555bf9efdd7f76233.exe File created C:\Program Files\Common Files\microsoft shared\MSInfo\it-IT\msinfo32.exe.mui.exe 24521b80c629898555bf9efdd7f76233.exe File opened for modification C:\Program Files\7-Zip\Lang\bn.txt 24521b80c629898555bf9efdd7f76233.exe File opened for modification C:\Program Files\7-Zip\Lang\cs.txt 24521b80c629898555bf9efdd7f76233.exe File opened for modification C:\Program Files\7-Zip\Lang\ga.txt 24521b80c629898555bf9efdd7f76233.exe File created C:\Program Files\7-Zip\Lang\tr.txt.exe 24521b80c629898555bf9efdd7f76233.exe File created C:\Program Files\Common Files\System\Ole DB\msxactps.dll 24521b80c629898555bf9efdd7f76233.exe File created C:\Program Files\Common Files\System\Ole DB\oledbjvs.inc 24521b80c629898555bf9efdd7f76233.exe File created C:\Program Files\Common Files\System\ado\es-ES\msader15.dll.mui 24521b80c629898555bf9efdd7f76233.exe File created C:\Program Files\Common Files\System\msadc\ja-JP\msadcor.dll.mui.exe 24521b80c629898555bf9efdd7f76233.exe File created C:\Program Files\Common Files\microsoft shared\ClickToRun\ApiClient.dll 24521b80c629898555bf9efdd7f76233.exe File created C:\Program Files\Common Files\microsoft shared\ClickToRun\msix.dll.exe 24521b80c629898555bf9efdd7f76233.exe File created C:\Program Files\Common Files\microsoft shared\MSInfo\de-DE\msinfo32.exe.mui 24521b80c629898555bf9efdd7f76233.exe File opened for modification C:\Program Files\7-Zip\Lang\pl.txt 24521b80c629898555bf9efdd7f76233.exe File created C:\Program Files\Common Files\System\ado\msado60.tlb 24521b80c629898555bf9efdd7f76233.exe File created C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.ko-kr.dll.exe 24521b80c629898555bf9efdd7f76233.exe File created C:\Program Files\Common Files\microsoft shared\ClickToRun\SubsystemController.man.exe 24521b80c629898555bf9efdd7f76233.exe File created C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-math-l1-1-0.dll.exe 24521b80c629898555bf9efdd7f76233.exe File created C:\Program Files\Common Files\System\Ole DB\de-DE\sqloledb.rll.mui.exe 24521b80c629898555bf9efdd7f76233.exe File created C:\Program Files\Common Files\System\Ole DB\oledb32.dll 24521b80c629898555bf9efdd7f76233.exe File created C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-runtime-l1-1-0.dll.exe 24521b80c629898555bf9efdd7f76233.exe File opened for modification C:\Program Files\7-Zip\Lang\az.txt 24521b80c629898555bf9efdd7f76233.exe File created C:\Program Files\7-Zip\Lang\ky.txt.exe 24521b80c629898555bf9efdd7f76233.exe File created C:\Program Files\Common Files\System\msadc\es-ES\msdaprsr.dll.mui.exe 24521b80c629898555bf9efdd7f76233.exe File created C:\Program Files\Common Files\microsoft shared\ClickToRun\ApiClient.dll.exe 24521b80c629898555bf9efdd7f76233.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
14KB
MD5450d747625d31fda307bdd7770679691
SHA14ca9513b803e03b79001bcf329d96bd419fb4841
SHA2568f84eca7fc3c452e6c083ac09bfadf91d14b8349b65fc5da7d196d2d1988713d
SHA512774db8f398a88dd72e3f2f67bb8a4098e332b968b1cc1b6592a0d1f0fa8c0aa00f459e0bef56da621f57b63b56827485089e004483852f4691ddfb8e2906ba9b