Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
149s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
31/12/2023, 05:01
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
293047e0825c75985cf02bb3051bda2f.exe
Resource
win7-20231129-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
293047e0825c75985cf02bb3051bda2f.exe
Resource
win10v2004-20231215-en
2 signatures
150 seconds
General
-
Target
293047e0825c75985cf02bb3051bda2f.exe
-
Size
281KB
-
MD5
293047e0825c75985cf02bb3051bda2f
-
SHA1
0afa9ae685630c3bf09f68b9238f160ebfaf6777
-
SHA256
79d9f65798a52d25116530f90a478dcdf69505d20f06f11a11d3c00052cdd831
-
SHA512
3e08a1a8ac723ee770da4ef49c00f95562c106bdeddc329f75edf2094fb598e60c2779fb45f666c47f5155abe7451e130daf23bfce452125738d30c0e7ecaad4
-
SSDEEP
6144:nEkIajmJ9z8t+EgBWw+cteYm9g8V4R4JTlFxZuqz:nYaj+/3Qdwe7CsDZ
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\msn_livers = "C:\\Arquivos de programas\\msnmsgr.exe" 293047e0825c75985cf02bb3051bda2f.exe -
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 1868 293047e0825c75985cf02bb3051bda2f.exe 1868 293047e0825c75985cf02bb3051bda2f.exe 1868 293047e0825c75985cf02bb3051bda2f.exe 1868 293047e0825c75985cf02bb3051bda2f.exe 1868 293047e0825c75985cf02bb3051bda2f.exe 1868 293047e0825c75985cf02bb3051bda2f.exe 1868 293047e0825c75985cf02bb3051bda2f.exe 1868 293047e0825c75985cf02bb3051bda2f.exe 1868 293047e0825c75985cf02bb3051bda2f.exe 1868 293047e0825c75985cf02bb3051bda2f.exe 1868 293047e0825c75985cf02bb3051bda2f.exe 1868 293047e0825c75985cf02bb3051bda2f.exe 1868 293047e0825c75985cf02bb3051bda2f.exe 1868 293047e0825c75985cf02bb3051bda2f.exe 1868 293047e0825c75985cf02bb3051bda2f.exe 1868 293047e0825c75985cf02bb3051bda2f.exe 1868 293047e0825c75985cf02bb3051bda2f.exe 1868 293047e0825c75985cf02bb3051bda2f.exe 1868 293047e0825c75985cf02bb3051bda2f.exe 1868 293047e0825c75985cf02bb3051bda2f.exe 1868 293047e0825c75985cf02bb3051bda2f.exe 1868 293047e0825c75985cf02bb3051bda2f.exe 1868 293047e0825c75985cf02bb3051bda2f.exe 1868 293047e0825c75985cf02bb3051bda2f.exe 1868 293047e0825c75985cf02bb3051bda2f.exe 1868 293047e0825c75985cf02bb3051bda2f.exe 1868 293047e0825c75985cf02bb3051bda2f.exe 1868 293047e0825c75985cf02bb3051bda2f.exe 1868 293047e0825c75985cf02bb3051bda2f.exe 1868 293047e0825c75985cf02bb3051bda2f.exe 1868 293047e0825c75985cf02bb3051bda2f.exe 1868 293047e0825c75985cf02bb3051bda2f.exe 1868 293047e0825c75985cf02bb3051bda2f.exe 1868 293047e0825c75985cf02bb3051bda2f.exe 1868 293047e0825c75985cf02bb3051bda2f.exe 1868 293047e0825c75985cf02bb3051bda2f.exe 1868 293047e0825c75985cf02bb3051bda2f.exe 1868 293047e0825c75985cf02bb3051bda2f.exe 1868 293047e0825c75985cf02bb3051bda2f.exe 1868 293047e0825c75985cf02bb3051bda2f.exe 1868 293047e0825c75985cf02bb3051bda2f.exe 1868 293047e0825c75985cf02bb3051bda2f.exe 1868 293047e0825c75985cf02bb3051bda2f.exe 1868 293047e0825c75985cf02bb3051bda2f.exe 1868 293047e0825c75985cf02bb3051bda2f.exe 1868 293047e0825c75985cf02bb3051bda2f.exe 1868 293047e0825c75985cf02bb3051bda2f.exe 1868 293047e0825c75985cf02bb3051bda2f.exe 1868 293047e0825c75985cf02bb3051bda2f.exe 1868 293047e0825c75985cf02bb3051bda2f.exe 1868 293047e0825c75985cf02bb3051bda2f.exe 1868 293047e0825c75985cf02bb3051bda2f.exe 1868 293047e0825c75985cf02bb3051bda2f.exe 1868 293047e0825c75985cf02bb3051bda2f.exe 1868 293047e0825c75985cf02bb3051bda2f.exe 1868 293047e0825c75985cf02bb3051bda2f.exe 1868 293047e0825c75985cf02bb3051bda2f.exe 1868 293047e0825c75985cf02bb3051bda2f.exe 1868 293047e0825c75985cf02bb3051bda2f.exe 1868 293047e0825c75985cf02bb3051bda2f.exe 1868 293047e0825c75985cf02bb3051bda2f.exe 1868 293047e0825c75985cf02bb3051bda2f.exe 1868 293047e0825c75985cf02bb3051bda2f.exe 1868 293047e0825c75985cf02bb3051bda2f.exe