Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
150s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
09/03/2024, 16:11
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
bc3cc5686f894e5ff370ab7f2250b072.exe
Resource
win7-20240221-en
windows7-x64
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
bc3cc5686f894e5ff370ab7f2250b072.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
4 signatures
150 seconds
General
-
Target
bc3cc5686f894e5ff370ab7f2250b072.exe
-
Size
418KB
-
MD5
bc3cc5686f894e5ff370ab7f2250b072
-
SHA1
e316b0bb86d59d7a710f2c17ecf07c1cd612c679
-
SHA256
f0127f113d98ed2a5247ba768749586277221c4cc17047ec1faef2452f6b5306
-
SHA512
362ce1b7de4b664777b8d0ea63c8f3abc6e578e4be097906739b5529ee108000b15c199b5e0697061dd1ae687b31e300bb9fad6392dac69684987c6d20667695
-
SSDEEP
12288:UJ1BIyL8J/vvFVtcOOc3G/NdWxCS3G4EnaT9jgiy:ULk/ZSWxCS24EnaTJg
Score
7/10
Malware Config
Signatures
-
Drops startup file 1 IoCs
description ioc Process File created C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\exe.lnk bc3cc5686f894e5ff370ab7f2250b072.exe -
Legitimate hosting services abused for malware hosting/C2 1 TTPs 5 IoCs
flow ioc 14 iplogger.org 36 bitbucket.org 37 bitbucket.org 44 bitbucket.org 8 iplogger.org -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 4288 bc3cc5686f894e5ff370ab7f2250b072.exe 4288 bc3cc5686f894e5ff370ab7f2250b072.exe 4288 bc3cc5686f894e5ff370ab7f2250b072.exe 4288 bc3cc5686f894e5ff370ab7f2250b072.exe 4288 bc3cc5686f894e5ff370ab7f2250b072.exe 4288 bc3cc5686f894e5ff370ab7f2250b072.exe 4288 bc3cc5686f894e5ff370ab7f2250b072.exe 4288 bc3cc5686f894e5ff370ab7f2250b072.exe 4288 bc3cc5686f894e5ff370ab7f2250b072.exe 4288 bc3cc5686f894e5ff370ab7f2250b072.exe 4288 bc3cc5686f894e5ff370ab7f2250b072.exe 4288 bc3cc5686f894e5ff370ab7f2250b072.exe 4288 bc3cc5686f894e5ff370ab7f2250b072.exe 4288 bc3cc5686f894e5ff370ab7f2250b072.exe 4288 bc3cc5686f894e5ff370ab7f2250b072.exe 4288 bc3cc5686f894e5ff370ab7f2250b072.exe 4288 bc3cc5686f894e5ff370ab7f2250b072.exe 4288 bc3cc5686f894e5ff370ab7f2250b072.exe 4288 bc3cc5686f894e5ff370ab7f2250b072.exe 4288 bc3cc5686f894e5ff370ab7f2250b072.exe 4288 bc3cc5686f894e5ff370ab7f2250b072.exe 4288 bc3cc5686f894e5ff370ab7f2250b072.exe 4288 bc3cc5686f894e5ff370ab7f2250b072.exe 4288 bc3cc5686f894e5ff370ab7f2250b072.exe 4288 bc3cc5686f894e5ff370ab7f2250b072.exe 4288 bc3cc5686f894e5ff370ab7f2250b072.exe 4288 bc3cc5686f894e5ff370ab7f2250b072.exe 4288 bc3cc5686f894e5ff370ab7f2250b072.exe 4288 bc3cc5686f894e5ff370ab7f2250b072.exe 4288 bc3cc5686f894e5ff370ab7f2250b072.exe 4288 bc3cc5686f894e5ff370ab7f2250b072.exe 4288 bc3cc5686f894e5ff370ab7f2250b072.exe 4288 bc3cc5686f894e5ff370ab7f2250b072.exe 4288 bc3cc5686f894e5ff370ab7f2250b072.exe 4288 bc3cc5686f894e5ff370ab7f2250b072.exe 4288 bc3cc5686f894e5ff370ab7f2250b072.exe 4288 bc3cc5686f894e5ff370ab7f2250b072.exe 4288 bc3cc5686f894e5ff370ab7f2250b072.exe 4288 bc3cc5686f894e5ff370ab7f2250b072.exe 4288 bc3cc5686f894e5ff370ab7f2250b072.exe 4288 bc3cc5686f894e5ff370ab7f2250b072.exe 4288 bc3cc5686f894e5ff370ab7f2250b072.exe 4288 bc3cc5686f894e5ff370ab7f2250b072.exe 4288 bc3cc5686f894e5ff370ab7f2250b072.exe 4288 bc3cc5686f894e5ff370ab7f2250b072.exe 4288 bc3cc5686f894e5ff370ab7f2250b072.exe 4288 bc3cc5686f894e5ff370ab7f2250b072.exe 4288 bc3cc5686f894e5ff370ab7f2250b072.exe 4288 bc3cc5686f894e5ff370ab7f2250b072.exe 4288 bc3cc5686f894e5ff370ab7f2250b072.exe 4288 bc3cc5686f894e5ff370ab7f2250b072.exe 4288 bc3cc5686f894e5ff370ab7f2250b072.exe 4288 bc3cc5686f894e5ff370ab7f2250b072.exe 4288 bc3cc5686f894e5ff370ab7f2250b072.exe 4288 bc3cc5686f894e5ff370ab7f2250b072.exe 4288 bc3cc5686f894e5ff370ab7f2250b072.exe 4288 bc3cc5686f894e5ff370ab7f2250b072.exe 4288 bc3cc5686f894e5ff370ab7f2250b072.exe 4288 bc3cc5686f894e5ff370ab7f2250b072.exe 4288 bc3cc5686f894e5ff370ab7f2250b072.exe 4288 bc3cc5686f894e5ff370ab7f2250b072.exe 4288 bc3cc5686f894e5ff370ab7f2250b072.exe 4288 bc3cc5686f894e5ff370ab7f2250b072.exe 4288 bc3cc5686f894e5ff370ab7f2250b072.exe