Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
164s -
max time network
172s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
01/01/2024, 18:48
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
3d9aed18a843dba045281f22af2d5b87.exe
Resource
win7-20231129-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
3d9aed18a843dba045281f22af2d5b87.exe
Resource
win10v2004-20231215-en
3 signatures
150 seconds
General
-
Target
3d9aed18a843dba045281f22af2d5b87.exe
-
Size
132KB
-
MD5
3d9aed18a843dba045281f22af2d5b87
-
SHA1
f8cb932777469e4e4a4ec2c717afc9bef05e3470
-
SHA256
22bb0fe1789f21c0b6808db547aef41f4713ecd5d690cd2adfd49a7afa5faf8b
-
SHA512
2752e30b3ea9fe6e567fd2e890c973037dc3b097a1924ed304cddb3dc013ad9c8e6855d60248fefb5346f92c13a67a728d0572e2924f96a835d2b0f8f3f9a94f
-
SSDEEP
3072:3m7xSfQXD0dSa3U5yGzwWlDkRJspTewUGlRDA/nD01:3USoz0dS6G3kBwUf/D01
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/3232-2-0x0000000000400000-0x0000000000449000-memory.dmp upx behavioral2/memory/3232-3-0x0000000000400000-0x0000000000449000-memory.dmp upx behavioral2/memory/3232-7-0x0000000000400000-0x0000000000449000-memory.dmp upx behavioral2/memory/3232-15-0x0000000000400000-0x0000000000449000-memory.dmp upx behavioral2/memory/3232-16-0x0000000000400000-0x0000000000449000-memory.dmp upx -
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-3073191680-435865314-2862784915-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\AAS = "C:\\Users\\Admin\\AppData\\Local\\Temp\\3d9aed18a843dba045281f22af2d5b87.exe /cs:1 " 3d9aed18a843dba045281f22af2d5b87.exe -
Checks for any installed AV software in registry 1 TTPs 1 IoCs
description ioc Process Key opened \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Eset\Nod\ 3d9aed18a843dba045281f22af2d5b87.exe