Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
149s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
09/03/2024, 13:21
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
bbe972777a6e297cc61d199d698fa69d.exe
Resource
win7-20240221-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
bbe972777a6e297cc61d199d698fa69d.exe
Resource
win10v2004-20240226-en
2 signatures
150 seconds
General
-
Target
bbe972777a6e297cc61d199d698fa69d.exe
-
Size
18KB
-
MD5
bbe972777a6e297cc61d199d698fa69d
-
SHA1
015baddc62fa7bd83eaaea80bca9fb910726432b
-
SHA256
f207c1763a471a17cf702a9ea13388a4f3c504bab0f2ca01e4db4c746283602d
-
SHA512
3386fa10107d6661bb5b16c974ca1e9aa013b4491a21ce7e4e542c09dcf43716eec56f3315ae2bbf0344dac0846cf8973becb0c7f93e550cd80fb17e43bd155c
-
SSDEEP
384:MkRdCyDMqlWemQW09diL/aRKJnF9g98mfjT8s:nCyIqlPmQX92RO1n8
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-399997616-3400990511-967324271-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\update82 = "C:\\Program Files (x86)\\Common Files\\update\\update.exe" bbe972777a6e297cc61d199d698fa69d.exe -
Drops file in Program Files directory 2 IoCs
description ioc Process File created C:\Program Files (x86)\Common Files\update\update.exe bbe972777a6e297cc61d199d698fa69d.exe File opened for modification C:\Program Files (x86)\Common Files\update\update.exe bbe972777a6e297cc61d199d698fa69d.exe