Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
142s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
09/01/2024, 15:42
Behavioral task
behavioral1
Sample
4eb2b07290caea4ddc9e17b121ee3e48.exe
Resource
win7-20231129-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
4eb2b07290caea4ddc9e17b121ee3e48.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
4eb2b07290caea4ddc9e17b121ee3e48.exe
-
Size
2.8MB
-
MD5
4eb2b07290caea4ddc9e17b121ee3e48
-
SHA1
464a909bae9a8f8f03c9755f22ff82c4802c18a5
-
SHA256
11535bc10b06cefcd5ee7c8bc8f066d74672cbd0ce10037708aeab429a983082
-
SHA512
b88fcfdf6f041579e2022a2b2be7e9d8a118b422928092ea4f89b39fae901ec4210fbdb474aca9549b82ae0efdb47f169707f52ef1cf51105b0ef5fc3f5f4dc0
-
SSDEEP
24576:S6pQPxQ2JyP2r5mJV91xM7RpbwgIvs7NxqUkHE6pQPxQ2JyP2r5mJV91O:SCqm2Jpr0nNM7Dus7Nx2kCqm2Jpr0ny
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/5100-0-0x0000000000400000-0x00000000005BA000-memory.dmp upx behavioral2/files/0x0002000000022849-5.dat upx behavioral2/memory/5100-460-0x0000000000400000-0x00000000005BA000-memory.dmp upx -
Drops file in Program Files directory 64 IoCs
description ioc Process File created C:\Program Files\Common Files\System\msadc\msdarem.dll 4eb2b07290caea4ddc9e17b121ee3e48.exe File created C:\Program Files\Google\Chrome\Application\chrome.exe.exe 4eb2b07290caea4ddc9e17b121ee3e48.exe File created C:\Program Files\Java\jdk-1.8\bin\jcmd.exe.exe 4eb2b07290caea4ddc9e17b121ee3e48.exe File created C:\Program Files\Java\jdk-1.8\jre\THIRDPARTYLICENSEREADME-JAVAFX.txt.exe 4eb2b07290caea4ddc9e17b121ee3e48.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\InspectorOfficeGadget.exe 4eb2b07290caea4ddc9e17b121ee3e48.exe File created C:\Program Files\Common Files\microsoft shared\MSInfo\de-DE\msinfo32.exe.mui 4eb2b07290caea4ddc9e17b121ee3e48.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\FrequentOfficeUpdateSchedule.xml 4eb2b07290caea4ddc9e17b121ee3e48.exe File created C:\Program Files\Common Files\System\msadc\fr-FR\msdaremr.dll.mui.exe 4eb2b07290caea4ddc9e17b121ee3e48.exe File created C:\Program Files\Common Files\microsoft shared\VSTO\10.0\1033\VSTOLoaderUI.dll.exe 4eb2b07290caea4ddc9e17b121ee3e48.exe File created C:\Program Files\Common Files\microsoft shared\ink\ipsnor.xml 4eb2b07290caea4ddc9e17b121ee3e48.exe File created C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\id.pak.exe 4eb2b07290caea4ddc9e17b121ee3e48.exe File opened for modification C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\ur.pak 4eb2b07290caea4ddc9e17b121ee3e48.exe File created C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.lt-lt.dll.exe 4eb2b07290caea4ddc9e17b121ee3e48.exe File created C:\Program Files\Common Files\microsoft shared\ink\Alphabet.xml 4eb2b07290caea4ddc9e17b121ee3e48.exe File created C:\Program Files\Common Files\microsoft shared\ink\Microsoft.Ink.dll 4eb2b07290caea4ddc9e17b121ee3e48.exe File created C:\Program Files\Common Files\microsoft shared\ink\de-DE\tabskb.dll.mui 4eb2b07290caea4ddc9e17b121ee3e48.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\api-ms-win-crt-private-l1-1-0.dll 4eb2b07290caea4ddc9e17b121ee3e48.exe File created C:\Program Files\7-Zip\Lang\tg.txt.exe 4eb2b07290caea4ddc9e17b121ee3e48.exe File created C:\Program Files\Common Files\Services\verisign.bmp.exe 4eb2b07290caea4ddc9e17b121ee3e48.exe File opened for modification C:\Program Files\Common Files\microsoft shared\VC\msdia90.dll 4eb2b07290caea4ddc9e17b121ee3e48.exe File created C:\Program Files\Internet Explorer\fr-FR\iexplore.exe.mui.exe 4eb2b07290caea4ddc9e17b121ee3e48.exe File created C:\Program Files\7-Zip\Lang\id.txt.exe 4eb2b07290caea4ddc9e17b121ee3e48.exe File created C:\Program Files\Common Files\System\Ole DB\msdasqlr.dll 4eb2b07290caea4ddc9e17b121ee3e48.exe File created C:\Program Files\Common Files\System\msadc\adcvbs.inc.exe 4eb2b07290caea4ddc9e17b121ee3e48.exe File created C:\Program Files\Common Files\microsoft shared\ink\it-IT\TabTip.exe.mui 4eb2b07290caea4ddc9e17b121ee3e48.exe File created C:\Program Files\Common Files\microsoft shared\ink\ja-JP\mshwLatin.dll.mui 4eb2b07290caea4ddc9e17b121ee3e48.exe File created C:\Program Files\Internet Explorer\de-DE\iexplore.exe.mui.exe 4eb2b07290caea4ddc9e17b121ee3e48.exe File created C:\Program Files\Common Files\microsoft shared\ink\de-DE\TabTip.exe.mui 4eb2b07290caea4ddc9e17b121ee3e48.exe File created C:\Program Files\Common Files\microsoft shared\ink\tpcps.dll 4eb2b07290caea4ddc9e17b121ee3e48.exe File created C:\Program Files\Common Files\System\Ole DB\ja-JP\msdasqlr.dll.mui.exe 4eb2b07290caea4ddc9e17b121ee3e48.exe File created C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.ru-ru.dll.exe 4eb2b07290caea4ddc9e17b121ee3e48.exe File created C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-convert-l1-1-0.dll.exe 4eb2b07290caea4ddc9e17b121ee3e48.exe File opened for modification C:\Program Files\7-Zip\Lang\ky.txt 4eb2b07290caea4ddc9e17b121ee3e48.exe File created C:\Program Files\Common Files\System\Ole DB\de-DE\msdasqlr.dll.mui 4eb2b07290caea4ddc9e17b121ee3e48.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\README.txt 4eb2b07290caea4ddc9e17b121ee3e48.exe File created C:\Program Files\Common Files\microsoft shared\ClickToRun\AppvIsvSubsystems32.dll.exe 4eb2b07290caea4ddc9e17b121ee3e48.exe File created C:\Program Files\Common Files\System\es-ES\wab32res.dll.mui 4eb2b07290caea4ddc9e17b121ee3e48.exe File created C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.uk-ua.dll.exe 4eb2b07290caea4ddc9e17b121ee3e48.exe File created C:\Program Files\Common Files\microsoft shared\ink\he-IL\tipresx.dll.mui 4eb2b07290caea4ddc9e17b121ee3e48.exe File opened for modification C:\Program Files\Internet Explorer\SIGNUP\install.ins 4eb2b07290caea4ddc9e17b121ee3e48.exe File created C:\Program Files\Common Files\System\msadc\fr-FR\msdaprsr.dll.mui 4eb2b07290caea4ddc9e17b121ee3e48.exe File created C:\Program Files\Common Files\microsoft shared\ink\fr-FR\TabTip.exe.mui.exe 4eb2b07290caea4ddc9e17b121ee3e48.exe File created C:\Program Files\Common Files\microsoft shared\ink\ipssrb.xml 4eb2b07290caea4ddc9e17b121ee3e48.exe File created C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\te.pak.exe 4eb2b07290caea4ddc9e17b121ee3e48.exe File created C:\Program Files\Internet Explorer\es-ES\ieinstal.exe.mui.exe 4eb2b07290caea4ddc9e17b121ee3e48.exe File opened for modification C:\Program Files\7-Zip\7z.sfx 4eb2b07290caea4ddc9e17b121ee3e48.exe File created C:\Program Files\7-Zip\Lang\sl.txt.exe 4eb2b07290caea4ddc9e17b121ee3e48.exe File created C:\Program Files\Java\jdk-1.8\bin\api-ms-win-core-util-l1-1-0.dll.exe 4eb2b07290caea4ddc9e17b121ee3e48.exe File created C:\Program Files\7-Zip\7zFM.exe.exe 4eb2b07290caea4ddc9e17b121ee3e48.exe File opened for modification C:\Program Files\7-Zip\Lang\bn.txt 4eb2b07290caea4ddc9e17b121ee3e48.exe File created C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\osknav\osknavbase.xml.exe 4eb2b07290caea4ddc9e17b121ee3e48.exe File created C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe.exe 4eb2b07290caea4ddc9e17b121ee3e48.exe File opened for modification C:\Program Files\Java\jdk-1.8\include\jvmticmlr.h 4eb2b07290caea4ddc9e17b121ee3e48.exe File created C:\Program Files\Common Files\System\Ole DB\it-IT\sqlxmlx.rll.mui 4eb2b07290caea4ddc9e17b121ee3e48.exe File created C:\Program Files\Common Files\System\msadc\it-IT\msadcor.dll.mui 4eb2b07290caea4ddc9e17b121ee3e48.exe File created C:\Program Files\Google\Chrome\Application\106.0.5249.119\VisualElements\Logo.png.exe 4eb2b07290caea4ddc9e17b121ee3e48.exe File created C:\Program Files\Java\jdk-1.8\bin\api-ms-win-crt-multibyte-l1-1-0.dll.exe 4eb2b07290caea4ddc9e17b121ee3e48.exe File opened for modification C:\Program Files\Google\Chrome\Application\master_preferences 4eb2b07290caea4ddc9e17b121ee3e48.exe File created C:\Program Files\Java\jdk-1.8\THIRDPARTYLICENSEREADME-JAVAFX.txt.exe 4eb2b07290caea4ddc9e17b121ee3e48.exe File created C:\Program Files\Common Files\System\ado\msadomd28.tlb 4eb2b07290caea4ddc9e17b121ee3e48.exe File created C:\Program Files\Common Files\microsoft shared\ink\ipsrus.xml 4eb2b07290caea4ddc9e17b121ee3e48.exe File created C:\Program Files\7-Zip\Lang\ps.txt.exe 4eb2b07290caea4ddc9e17b121ee3e48.exe File created C:\Program Files\Common Files\System\Ole DB\it-IT\sqlxmlx.rll.mui.exe 4eb2b07290caea4ddc9e17b121ee3e48.exe File created C:\Program Files\Java\jdk-1.8\bin\api-ms-win-core-errorhandling-l1-1-0.dll.exe 4eb2b07290caea4ddc9e17b121ee3e48.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.8MB
MD5240d2b474495b46a5d9d3c622da1e1d4
SHA1cf7014f657ba1ff3c799f0967489932273740a32
SHA256019f66aadb27afbb254f52dde77ccdeb659b137146761e91e25c04ee72173fbf
SHA5129ea87104108db68c794e3a0997521bc58c013c08bb6ddb8b7a641e9424bcf8650e5ea81a442e3d17541fc2cefa70207cfe2b9cc53c98f0fdf58ed6c46a23b128