Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
150s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
12/01/2024, 04:46
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
5586be6ae9e73a69234b9d3135fb1961.exe
Resource
win7-20231129-en
windows7-x64
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
5586be6ae9e73a69234b9d3135fb1961.exe
Resource
win10v2004-20231222-en
windows10-2004-x64
3 signatures
150 seconds
General
-
Target
5586be6ae9e73a69234b9d3135fb1961.exe
-
Size
237KB
-
MD5
5586be6ae9e73a69234b9d3135fb1961
-
SHA1
1e7fe6d2db30e7d9402ef5194a4075fc40fd8632
-
SHA256
22bd7b7309bab79b833a258be7aa919bcc4f904b242dc8d10a42ab44e8e9fee8
-
SHA512
d0320ca7e71dd11e93c78d289d3caa08908d0fe0a2cab60fa06654e3dee7c73efbd0e3ff454c310dc9ebc38ab0cadc27a4bcf40597b870d04fda99241f91c5c6
-
SSDEEP
3072:LAkb8JgrIEkdjuPWCakVm6fIlixW7lkSuCKdT5hUFQwQ7t3ecIQKawfEU6q1RTGw:LQaB57Vm63CLvxds29/
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\Microsoft Updater = "\"C:\\Users\\Admin\\AppData\\Local\\Temp\\5586be6ae9e73a69234b9d3135fb1961.exe\"" 5586be6ae9e73a69234b9d3135fb1961.exe -
description ioc Process Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA 5586be6ae9e73a69234b9d3135fb1961.exe -
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 1488 5586be6ae9e73a69234b9d3135fb1961.exe 1488 5586be6ae9e73a69234b9d3135fb1961.exe 1488 5586be6ae9e73a69234b9d3135fb1961.exe 1488 5586be6ae9e73a69234b9d3135fb1961.exe 1488 5586be6ae9e73a69234b9d3135fb1961.exe 1488 5586be6ae9e73a69234b9d3135fb1961.exe 1488 5586be6ae9e73a69234b9d3135fb1961.exe 1488 5586be6ae9e73a69234b9d3135fb1961.exe 1488 5586be6ae9e73a69234b9d3135fb1961.exe 1488 5586be6ae9e73a69234b9d3135fb1961.exe 1488 5586be6ae9e73a69234b9d3135fb1961.exe 1488 5586be6ae9e73a69234b9d3135fb1961.exe 1488 5586be6ae9e73a69234b9d3135fb1961.exe 1488 5586be6ae9e73a69234b9d3135fb1961.exe 1488 5586be6ae9e73a69234b9d3135fb1961.exe 1488 5586be6ae9e73a69234b9d3135fb1961.exe 1488 5586be6ae9e73a69234b9d3135fb1961.exe 1488 5586be6ae9e73a69234b9d3135fb1961.exe 1488 5586be6ae9e73a69234b9d3135fb1961.exe 1488 5586be6ae9e73a69234b9d3135fb1961.exe 1488 5586be6ae9e73a69234b9d3135fb1961.exe 1488 5586be6ae9e73a69234b9d3135fb1961.exe 1488 5586be6ae9e73a69234b9d3135fb1961.exe 1488 5586be6ae9e73a69234b9d3135fb1961.exe 1488 5586be6ae9e73a69234b9d3135fb1961.exe 1488 5586be6ae9e73a69234b9d3135fb1961.exe 1488 5586be6ae9e73a69234b9d3135fb1961.exe 1488 5586be6ae9e73a69234b9d3135fb1961.exe 1488 5586be6ae9e73a69234b9d3135fb1961.exe 1488 5586be6ae9e73a69234b9d3135fb1961.exe 1488 5586be6ae9e73a69234b9d3135fb1961.exe 1488 5586be6ae9e73a69234b9d3135fb1961.exe 1488 5586be6ae9e73a69234b9d3135fb1961.exe 1488 5586be6ae9e73a69234b9d3135fb1961.exe 1488 5586be6ae9e73a69234b9d3135fb1961.exe 1488 5586be6ae9e73a69234b9d3135fb1961.exe 1488 5586be6ae9e73a69234b9d3135fb1961.exe 1488 5586be6ae9e73a69234b9d3135fb1961.exe 1488 5586be6ae9e73a69234b9d3135fb1961.exe 1488 5586be6ae9e73a69234b9d3135fb1961.exe 1488 5586be6ae9e73a69234b9d3135fb1961.exe 1488 5586be6ae9e73a69234b9d3135fb1961.exe 1488 5586be6ae9e73a69234b9d3135fb1961.exe 1488 5586be6ae9e73a69234b9d3135fb1961.exe 1488 5586be6ae9e73a69234b9d3135fb1961.exe 1488 5586be6ae9e73a69234b9d3135fb1961.exe 1488 5586be6ae9e73a69234b9d3135fb1961.exe 1488 5586be6ae9e73a69234b9d3135fb1961.exe 1488 5586be6ae9e73a69234b9d3135fb1961.exe 1488 5586be6ae9e73a69234b9d3135fb1961.exe 1488 5586be6ae9e73a69234b9d3135fb1961.exe 1488 5586be6ae9e73a69234b9d3135fb1961.exe 1488 5586be6ae9e73a69234b9d3135fb1961.exe 1488 5586be6ae9e73a69234b9d3135fb1961.exe 1488 5586be6ae9e73a69234b9d3135fb1961.exe 1488 5586be6ae9e73a69234b9d3135fb1961.exe 1488 5586be6ae9e73a69234b9d3135fb1961.exe 1488 5586be6ae9e73a69234b9d3135fb1961.exe 1488 5586be6ae9e73a69234b9d3135fb1961.exe 1488 5586be6ae9e73a69234b9d3135fb1961.exe 1488 5586be6ae9e73a69234b9d3135fb1961.exe 1488 5586be6ae9e73a69234b9d3135fb1961.exe 1488 5586be6ae9e73a69234b9d3135fb1961.exe 1488 5586be6ae9e73a69234b9d3135fb1961.exe