Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
152s -
max time network
142s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
11/01/2024, 12:27
Static task
static1
Behavioral task
behavioral1
Sample
53841da8fb04030e01af20b8429cdac4.exe
Resource
win7-20231215-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
53841da8fb04030e01af20b8429cdac4.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
3 signatures
150 seconds
General
-
Target
53841da8fb04030e01af20b8429cdac4.exe
-
Size
431KB
-
MD5
53841da8fb04030e01af20b8429cdac4
-
SHA1
83aff98b0a87e356a5cce243720e24ee4996ccf1
-
SHA256
7c9e1c2fcf6c8edff7922e5575a24accb5e8f03ccdfb55ffb3248a130a5eb9f9
-
SHA512
b05ca131d8db543bfe4ecdc775646975ccd4b34fae47860bf8da67341a498279aaa976f1220e339aceffcb21b220b132f0aa770cf61cb6082d14f2887cb5b9c6
-
SSDEEP
12288:64pKoI1+kLzLz3dQI8wtp1PLkzHu5VLDB:7u5vX3db5tAz+B
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/4936-1-0x0000000000400000-0x0000000000485000-memory.dmp upx behavioral2/memory/4936-2-0x0000000000400000-0x0000000000485000-memory.dmp upx -
Modifies Control Panel 1 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-3073191680-435865314-2862784915-1000\Control Panel\5761b2dc-ce77-4bfa-b965-6f33b1867cf2 53841da8fb04030e01af20b8429cdac4.exe -
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 4936 53841da8fb04030e01af20b8429cdac4.exe 4936 53841da8fb04030e01af20b8429cdac4.exe 4936 53841da8fb04030e01af20b8429cdac4.exe 4936 53841da8fb04030e01af20b8429cdac4.exe 4936 53841da8fb04030e01af20b8429cdac4.exe 4936 53841da8fb04030e01af20b8429cdac4.exe 4936 53841da8fb04030e01af20b8429cdac4.exe 4936 53841da8fb04030e01af20b8429cdac4.exe 4936 53841da8fb04030e01af20b8429cdac4.exe 4936 53841da8fb04030e01af20b8429cdac4.exe 4936 53841da8fb04030e01af20b8429cdac4.exe 4936 53841da8fb04030e01af20b8429cdac4.exe 4936 53841da8fb04030e01af20b8429cdac4.exe 4936 53841da8fb04030e01af20b8429cdac4.exe 4936 53841da8fb04030e01af20b8429cdac4.exe 4936 53841da8fb04030e01af20b8429cdac4.exe 4936 53841da8fb04030e01af20b8429cdac4.exe 4936 53841da8fb04030e01af20b8429cdac4.exe 4936 53841da8fb04030e01af20b8429cdac4.exe 4936 53841da8fb04030e01af20b8429cdac4.exe 4936 53841da8fb04030e01af20b8429cdac4.exe 4936 53841da8fb04030e01af20b8429cdac4.exe 4936 53841da8fb04030e01af20b8429cdac4.exe 4936 53841da8fb04030e01af20b8429cdac4.exe 4936 53841da8fb04030e01af20b8429cdac4.exe 4936 53841da8fb04030e01af20b8429cdac4.exe 4936 53841da8fb04030e01af20b8429cdac4.exe 4936 53841da8fb04030e01af20b8429cdac4.exe 4936 53841da8fb04030e01af20b8429cdac4.exe 4936 53841da8fb04030e01af20b8429cdac4.exe 4936 53841da8fb04030e01af20b8429cdac4.exe 4936 53841da8fb04030e01af20b8429cdac4.exe 4936 53841da8fb04030e01af20b8429cdac4.exe 4936 53841da8fb04030e01af20b8429cdac4.exe 4936 53841da8fb04030e01af20b8429cdac4.exe 4936 53841da8fb04030e01af20b8429cdac4.exe 4936 53841da8fb04030e01af20b8429cdac4.exe 4936 53841da8fb04030e01af20b8429cdac4.exe 4936 53841da8fb04030e01af20b8429cdac4.exe 4936 53841da8fb04030e01af20b8429cdac4.exe 4936 53841da8fb04030e01af20b8429cdac4.exe 4936 53841da8fb04030e01af20b8429cdac4.exe 4936 53841da8fb04030e01af20b8429cdac4.exe 4936 53841da8fb04030e01af20b8429cdac4.exe 4936 53841da8fb04030e01af20b8429cdac4.exe 4936 53841da8fb04030e01af20b8429cdac4.exe 4936 53841da8fb04030e01af20b8429cdac4.exe 4936 53841da8fb04030e01af20b8429cdac4.exe 4936 53841da8fb04030e01af20b8429cdac4.exe 4936 53841da8fb04030e01af20b8429cdac4.exe 4936 53841da8fb04030e01af20b8429cdac4.exe 4936 53841da8fb04030e01af20b8429cdac4.exe 4936 53841da8fb04030e01af20b8429cdac4.exe 4936 53841da8fb04030e01af20b8429cdac4.exe 4936 53841da8fb04030e01af20b8429cdac4.exe 4936 53841da8fb04030e01af20b8429cdac4.exe 4936 53841da8fb04030e01af20b8429cdac4.exe 4936 53841da8fb04030e01af20b8429cdac4.exe 4936 53841da8fb04030e01af20b8429cdac4.exe 4936 53841da8fb04030e01af20b8429cdac4.exe 4936 53841da8fb04030e01af20b8429cdac4.exe 4936 53841da8fb04030e01af20b8429cdac4.exe 4936 53841da8fb04030e01af20b8429cdac4.exe 4936 53841da8fb04030e01af20b8429cdac4.exe