Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
5s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
06/01/2024, 12:48
Behavioral task
behavioral1
Sample
46442f76883969daf962a2e6cd23eb20.exe
Resource
win7-20231215-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
46442f76883969daf962a2e6cd23eb20.exe
Resource
win10v2004-20231222-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
46442f76883969daf962a2e6cd23eb20.exe
-
Size
2.8MB
-
MD5
46442f76883969daf962a2e6cd23eb20
-
SHA1
9d9bc80b90330919bf5f0a49dfbdc6a1e5ad2a89
-
SHA256
ff44ef5934ce9d787f72b76b14b04fe0eddaddec5150392cf3a378609c2b92ce
-
SHA512
a323d7e1c7e45de39c97572c5f7952288b6ad6477f6d286f3af69a7257b45b72805874696176a0a3754504700ae8360a7fdb5e8b2d6c01145ade9280fc37d4a4
-
SSDEEP
24576:S6pQPxQ2JyP2r5mJV91xM7RpbwgIvs7NxqN6pQPxQ2JyP2r5mJV91D:SCqm2Jpr0nNM7Dus7NxMCqm2Jpr0nf
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/2248-0-0x0000000000400000-0x00000000005BA000-memory.dmp upx behavioral2/files/0x00010000000228b1-5.dat upx behavioral2/memory/2248-3999-0x0000000000400000-0x00000000005BA000-memory.dmp upx behavioral2/memory/2248-8655-0x0000000000400000-0x00000000005BA000-memory.dmp upx -
Drops file in Program Files directory 64 IoCs
description ioc Process File created C:\Program Files\7-Zip\Lang\az.txt.exe 46442f76883969daf962a2e6cd23eb20.exe File created C:\Program Files\7-Zip\Lang\ky.txt.exe 46442f76883969daf962a2e6cd23eb20.exe File created C:\Program Files\Common Files\System\de-DE\wab32res.dll.mui 46442f76883969daf962a2e6cd23eb20.exe File created C:\Program Files\Common Files\microsoft shared\ink\InkDiv.dll.exe 46442f76883969daf962a2e6cd23eb20.exe File opened for modification C:\Program Files\7-Zip\Lang\es.txt 46442f76883969daf962a2e6cd23eb20.exe File created C:\Program Files\Common Files\System\msadc\msdfmap.dll.exe 46442f76883969daf962a2e6cd23eb20.exe File created C:\Program Files\Common Files\microsoft shared\MSInfo\de-DE\msinfo32.exe.mui 46442f76883969daf962a2e6cd23eb20.exe File created C:\Program Files\Common Files\microsoft shared\ink\Microsoft.Ink.dll 46442f76883969daf962a2e6cd23eb20.exe File opened for modification C:\Program Files\7-Zip\Lang\be.txt 46442f76883969daf962a2e6cd23eb20.exe File created C:\Program Files\7-Zip\Lang\hi.txt.exe 46442f76883969daf962a2e6cd23eb20.exe File opened for modification C:\Program Files\7-Zip\Lang\id.txt 46442f76883969daf962a2e6cd23eb20.exe File created C:\Program Files\7-Zip\Lang\uz.txt.exe 46442f76883969daf962a2e6cd23eb20.exe File opened for modification C:\Program Files\7-Zip\Lang\pa-in.txt 46442f76883969daf962a2e6cd23eb20.exe File opened for modification C:\Program Files\7-Zip\Lang\eu.txt 46442f76883969daf962a2e6cd23eb20.exe File opened for modification C:\Program Files\7-Zip\Lang\nn.txt 46442f76883969daf962a2e6cd23eb20.exe File created C:\Program Files\Common Files\System\Ole DB\it-IT\sqlxmlx.rll.mui.exe 46442f76883969daf962a2e6cd23eb20.exe File created C:\Program Files\Common Files\System\ja-JP\wab32res.dll.mui 46442f76883969daf962a2e6cd23eb20.exe File created C:\Program Files\Common Files\microsoft shared\ink\de-DE\tipresx.dll.mui 46442f76883969daf962a2e6cd23eb20.exe File created C:\Program Files\Common Files\microsoft shared\ink\fi-FI\tipresx.dll.mui 46442f76883969daf962a2e6cd23eb20.exe File created C:\Program Files\Common Files\System\Ole DB\es-ES\sqlxmlx.rll.mui 46442f76883969daf962a2e6cd23eb20.exe File created C:\Program Files\Common Files\System\ado\msado15.dll.exe 46442f76883969daf962a2e6cd23eb20.exe File created C:\Program Files\Common Files\System\msadc\ja-JP\msdaremr.dll.mui 46442f76883969daf962a2e6cd23eb20.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.el-gr.dll 46442f76883969daf962a2e6cd23eb20.exe File created C:\Program Files\Common Files\System\Ole DB\es-ES\sqloledb.rll.mui.exe 46442f76883969daf962a2e6cd23eb20.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.it-it.dll 46442f76883969daf962a2e6cd23eb20.exe File created C:\Program Files\Common Files\microsoft shared\ClickToRun\vcruntime140.dll.exe 46442f76883969daf962a2e6cd23eb20.exe File created C:\Program Files\Common Files\microsoft shared\ink\InkDiv.dll 46442f76883969daf962a2e6cd23eb20.exe File created C:\Program Files\7-Zip\History.txt.exe 46442f76883969daf962a2e6cd23eb20.exe File created C:\Program Files\7-Zip\Lang\uk.txt.exe 46442f76883969daf962a2e6cd23eb20.exe File created C:\Program Files\Common Files\System\Ole DB\oledbjvs.inc 46442f76883969daf962a2e6cd23eb20.exe File created C:\Program Files\Common Files\System\msadc\es-ES\msadcer.dll.mui 46442f76883969daf962a2e6cd23eb20.exe File created C:\Program Files\Common Files\System\msadc\it-IT\msadcer.dll.mui 46442f76883969daf962a2e6cd23eb20.exe File created C:\Program Files\Common Files\microsoft shared\ink\es-ES\ShapeCollector.exe.mui 46442f76883969daf962a2e6cd23eb20.exe File created C:\Program Files\7-Zip\Lang\mng2.txt.exe 46442f76883969daf962a2e6cd23eb20.exe File created C:\Program Files\7-Zip\descript.ion.exe 46442f76883969daf962a2e6cd23eb20.exe File created C:\Program Files\Common Files\System\Ole DB\de-DE\oledb32r.dll.mui 46442f76883969daf962a2e6cd23eb20.exe File created C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.et-ee.dll.exe 46442f76883969daf962a2e6cd23eb20.exe File created C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.sk-sk.dll.exe 46442f76883969daf962a2e6cd23eb20.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.sl-si.dll 46442f76883969daf962a2e6cd23eb20.exe File created C:\Program Files\7-Zip\7-zip.dll.exe 46442f76883969daf962a2e6cd23eb20.exe File created C:\Program Files\7-Zip\Lang\eu.txt.exe 46442f76883969daf962a2e6cd23eb20.exe File created C:\Program Files\Common Files\microsoft shared\VC\msdia100.dll.exe 46442f76883969daf962a2e6cd23eb20.exe File created C:\Program Files\Common Files\System\Ole DB\de-DE\msdasqlr.dll.mui.exe 46442f76883969daf962a2e6cd23eb20.exe File created C:\Program Files\Common Files\System\Ole DB\es-ES\sqlxmlx.rll.mui.exe 46442f76883969daf962a2e6cd23eb20.exe File opened for modification C:\Program Files\7-Zip\7-zip.chm 46442f76883969daf962a2e6cd23eb20.exe File opened for modification C:\Program Files\7-Zip\Lang\lv.txt 46442f76883969daf962a2e6cd23eb20.exe File created C:\Program Files\Common Files\System\ado\adovbs.inc.exe 46442f76883969daf962a2e6cd23eb20.exe File created C:\Program Files\Common Files\microsoft shared\ink\es-ES\InkObj.dll.mui 46442f76883969daf962a2e6cd23eb20.exe File created C:\Program Files\7-Zip\Lang\mk.txt.exe 46442f76883969daf962a2e6cd23eb20.exe File created C:\Program Files\Common Files\Services\verisign.bmp 46442f76883969daf962a2e6cd23eb20.exe File created C:\Program Files\Common Files\System\Ole DB\sqloledb.rll.exe 46442f76883969daf962a2e6cd23eb20.exe File opened for modification C:\Program Files\7-Zip\Lang\ar.txt 46442f76883969daf962a2e6cd23eb20.exe File created C:\Program Files\Common Files\System\Ole DB\sqlxmlx.dll 46442f76883969daf962a2e6cd23eb20.exe File created C:\Program Files\Common Files\System\msadc\msadco.dll 46442f76883969daf962a2e6cd23eb20.exe File opened for modification C:\Program Files\7-Zip\Lang\an.txt 46442f76883969daf962a2e6cd23eb20.exe File created C:\Program Files\Common Files\System\Ole DB\ja-JP\oledb32r.dll.mui 46442f76883969daf962a2e6cd23eb20.exe File created C:\Program Files\Common Files\System\Ole DB\ja-JP\sqlxmlx.rll.mui 46442f76883969daf962a2e6cd23eb20.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.pt-pt.dll 46442f76883969daf962a2e6cd23eb20.exe File created C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-core-synch-l1-2-0.dll.exe 46442f76883969daf962a2e6cd23eb20.exe File created C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-multibyte-l1-1-0.dll.exe 46442f76883969daf962a2e6cd23eb20.exe File created C:\Program Files\Common Files\microsoft shared\ink\de-DE\tipresx.dll.mui.exe 46442f76883969daf962a2e6cd23eb20.exe File created C:\Program Files\7-Zip\Lang\ku.txt.exe 46442f76883969daf962a2e6cd23eb20.exe File created C:\Program Files\Common Files\System\es-ES\wab32res.dll.mui.exe 46442f76883969daf962a2e6cd23eb20.exe File opened for modification C:\Program Files\7-Zip\descript.ion 46442f76883969daf962a2e6cd23eb20.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
381KB
MD52e6c5fa5421dc2472b426f9e20bb1a8d
SHA1858ea62ed936482d0139a2a9f72f6471efb52c02
SHA256cc29fe4d92038da803cb7fb2b12fd66ed619f330a923a3ff4914cd1c37061ed9
SHA5121801fe226fe479c26e616e68d0f0b460565e81fc47485baf376f54c32c9e761b39dee0958b198be68a6b4388afd12e29070196f54475c8821831f0b6c6ac407f