Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
149s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
13/01/2024, 04:57
Static task
static1
Behavioral task
behavioral1
Sample
5809f469fd1f4ac8e2438b4849b72dad.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5809f469fd1f4ac8e2438b4849b72dad.exe
Resource
win10v2004-20231215-en
General
-
Target
5809f469fd1f4ac8e2438b4849b72dad.exe
-
Size
258KB
-
MD5
5809f469fd1f4ac8e2438b4849b72dad
-
SHA1
43530bb3d8b2723f4ed5138386d56f71d36fec4d
-
SHA256
10f54b5f96b03b2eee4d5825d84a0d5b95a799b0d671ca43a59b9248fb679538
-
SHA512
4d5e489dc16593d7061d619975e4868c25e004e5175879db3b2026c5f66341494ce363de2055c131cef3be31bcc4f950c68ec34447aa1609364424ccf544a1e3
-
SSDEEP
6144:54oS/RRRXOKggC7pHuutLa4Q4Y5VtpyW8h0hjYNDT:uTRmKggOHuELa4Q4eVtoW8ajyDT
Malware Config
Signatures
-
Maps connected drives based on registry 3 TTPs 2 IoCs
Disk information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\services\disk\enum 5809f469fd1f4ac8e2438b4849b72dad.exe Key value enumerated \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\disk\Enum 5809f469fd1f4ac8e2438b4849b72dad.exe -
Drops file in Windows directory 1 IoCs
description ioc Process File created C:\Windows\Tasks\TouchDetector.job 5809f469fd1f4ac8e2438b4849b72dad.exe