Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
150s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
10/03/2024, 16:25
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
bf0f045c7ea3d3fe1a3ca5e65e10ccc4.exe
Resource
win7-20240221-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
bf0f045c7ea3d3fe1a3ca5e65e10ccc4.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
bf0f045c7ea3d3fe1a3ca5e65e10ccc4.exe
-
Size
436KB
-
MD5
bf0f045c7ea3d3fe1a3ca5e65e10ccc4
-
SHA1
0e2da8fa972bf0217777bfe349d8694ef104457a
-
SHA256
6863de931cdb7bf33439eba671a2c9cefa28342589b90030f0e163cb5f1ee67b
-
SHA512
4a60a235b0ddc652ab11376066d30de83aa9e509f1adaf9ee74fa9b47ad33f8d8de319a717f2e5ebc603291e3a4a36e5057a4caf59b0d34968ced7bfea861256
-
SSDEEP
6144:61llO6qiPvfnELDoYDKEITi8TCqkQzhDkgMTS69/ySWhbUmZgu4fzpRME/wGbQ7m:69O6vPahDzdj0f6guK4FV/Ol5i9
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/2188-2-0x0000000000400000-0x0000000000492000-memory.dmp upx behavioral1/memory/2188-3-0x0000000000400000-0x0000000000492000-memory.dmp upx -
Modifies Control Panel 1 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Control Panel\5761b2dc-ce77-4bfa-b965-6f33b1867cf2 bf0f045c7ea3d3fe1a3ca5e65e10ccc4.exe -
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 2188 bf0f045c7ea3d3fe1a3ca5e65e10ccc4.exe 2188 bf0f045c7ea3d3fe1a3ca5e65e10ccc4.exe 2188 bf0f045c7ea3d3fe1a3ca5e65e10ccc4.exe 2188 bf0f045c7ea3d3fe1a3ca5e65e10ccc4.exe 2188 bf0f045c7ea3d3fe1a3ca5e65e10ccc4.exe 2188 bf0f045c7ea3d3fe1a3ca5e65e10ccc4.exe 2188 bf0f045c7ea3d3fe1a3ca5e65e10ccc4.exe 2188 bf0f045c7ea3d3fe1a3ca5e65e10ccc4.exe 2188 bf0f045c7ea3d3fe1a3ca5e65e10ccc4.exe 2188 bf0f045c7ea3d3fe1a3ca5e65e10ccc4.exe 2188 bf0f045c7ea3d3fe1a3ca5e65e10ccc4.exe 2188 bf0f045c7ea3d3fe1a3ca5e65e10ccc4.exe 2188 bf0f045c7ea3d3fe1a3ca5e65e10ccc4.exe 2188 bf0f045c7ea3d3fe1a3ca5e65e10ccc4.exe 2188 bf0f045c7ea3d3fe1a3ca5e65e10ccc4.exe 2188 bf0f045c7ea3d3fe1a3ca5e65e10ccc4.exe 2188 bf0f045c7ea3d3fe1a3ca5e65e10ccc4.exe 2188 bf0f045c7ea3d3fe1a3ca5e65e10ccc4.exe 2188 bf0f045c7ea3d3fe1a3ca5e65e10ccc4.exe 2188 bf0f045c7ea3d3fe1a3ca5e65e10ccc4.exe 2188 bf0f045c7ea3d3fe1a3ca5e65e10ccc4.exe 2188 bf0f045c7ea3d3fe1a3ca5e65e10ccc4.exe 2188 bf0f045c7ea3d3fe1a3ca5e65e10ccc4.exe 2188 bf0f045c7ea3d3fe1a3ca5e65e10ccc4.exe 2188 bf0f045c7ea3d3fe1a3ca5e65e10ccc4.exe 2188 bf0f045c7ea3d3fe1a3ca5e65e10ccc4.exe 2188 bf0f045c7ea3d3fe1a3ca5e65e10ccc4.exe 2188 bf0f045c7ea3d3fe1a3ca5e65e10ccc4.exe 2188 bf0f045c7ea3d3fe1a3ca5e65e10ccc4.exe 2188 bf0f045c7ea3d3fe1a3ca5e65e10ccc4.exe 2188 bf0f045c7ea3d3fe1a3ca5e65e10ccc4.exe 2188 bf0f045c7ea3d3fe1a3ca5e65e10ccc4.exe 2188 bf0f045c7ea3d3fe1a3ca5e65e10ccc4.exe 2188 bf0f045c7ea3d3fe1a3ca5e65e10ccc4.exe 2188 bf0f045c7ea3d3fe1a3ca5e65e10ccc4.exe 2188 bf0f045c7ea3d3fe1a3ca5e65e10ccc4.exe 2188 bf0f045c7ea3d3fe1a3ca5e65e10ccc4.exe 2188 bf0f045c7ea3d3fe1a3ca5e65e10ccc4.exe 2188 bf0f045c7ea3d3fe1a3ca5e65e10ccc4.exe 2188 bf0f045c7ea3d3fe1a3ca5e65e10ccc4.exe 2188 bf0f045c7ea3d3fe1a3ca5e65e10ccc4.exe 2188 bf0f045c7ea3d3fe1a3ca5e65e10ccc4.exe 2188 bf0f045c7ea3d3fe1a3ca5e65e10ccc4.exe 2188 bf0f045c7ea3d3fe1a3ca5e65e10ccc4.exe 2188 bf0f045c7ea3d3fe1a3ca5e65e10ccc4.exe 2188 bf0f045c7ea3d3fe1a3ca5e65e10ccc4.exe 2188 bf0f045c7ea3d3fe1a3ca5e65e10ccc4.exe 2188 bf0f045c7ea3d3fe1a3ca5e65e10ccc4.exe 2188 bf0f045c7ea3d3fe1a3ca5e65e10ccc4.exe 2188 bf0f045c7ea3d3fe1a3ca5e65e10ccc4.exe 2188 bf0f045c7ea3d3fe1a3ca5e65e10ccc4.exe 2188 bf0f045c7ea3d3fe1a3ca5e65e10ccc4.exe 2188 bf0f045c7ea3d3fe1a3ca5e65e10ccc4.exe 2188 bf0f045c7ea3d3fe1a3ca5e65e10ccc4.exe 2188 bf0f045c7ea3d3fe1a3ca5e65e10ccc4.exe 2188 bf0f045c7ea3d3fe1a3ca5e65e10ccc4.exe 2188 bf0f045c7ea3d3fe1a3ca5e65e10ccc4.exe 2188 bf0f045c7ea3d3fe1a3ca5e65e10ccc4.exe 2188 bf0f045c7ea3d3fe1a3ca5e65e10ccc4.exe 2188 bf0f045c7ea3d3fe1a3ca5e65e10ccc4.exe 2188 bf0f045c7ea3d3fe1a3ca5e65e10ccc4.exe 2188 bf0f045c7ea3d3fe1a3ca5e65e10ccc4.exe 2188 bf0f045c7ea3d3fe1a3ca5e65e10ccc4.exe 2188 bf0f045c7ea3d3fe1a3ca5e65e10ccc4.exe