Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
150s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
15/03/2024, 22:31
Static task
static1
Behavioral task
behavioral1
Sample
cc6b83f066e4d8e61d855de191a785c7.exe
Resource
win7-20240220-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
cc6b83f066e4d8e61d855de191a785c7.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
3 signatures
150 seconds
General
-
Target
cc6b83f066e4d8e61d855de191a785c7.exe
-
Size
437KB
-
MD5
cc6b83f066e4d8e61d855de191a785c7
-
SHA1
aba872ffc37c959ab0ade1c5dbc341cea98c0db2
-
SHA256
794fed30892a3ed8c12cf23e0b4dc0873b452e98c9667e57d2350f2113cf69a7
-
SHA512
ee2ff8366c17d46ee033501dab2606d64c8556e88a95d5f773e961c8e7a4014277e642b0fee21bbe2ebba8ea5296dd91a52768f712de670a5176968d86fc8646
-
SSDEEP
12288:T0JBqbCHhRZFkukMk1V1qZ6ORl0YWbbnyn7v:T0JBq2HzZFkukMOGZ6ORl0YMby7v
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/3620-1-0x0000000000400000-0x0000000000489000-memory.dmp upx behavioral2/memory/3620-2-0x0000000000400000-0x0000000000489000-memory.dmp upx -
Modifies Control Panel 1 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-983155329-280873152-1838004294-1000\Control Panel\5761b2dc-ce77-4bfa-b965-6f33b1867cf2 cc6b83f066e4d8e61d855de191a785c7.exe -
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 3620 cc6b83f066e4d8e61d855de191a785c7.exe 3620 cc6b83f066e4d8e61d855de191a785c7.exe 3620 cc6b83f066e4d8e61d855de191a785c7.exe 3620 cc6b83f066e4d8e61d855de191a785c7.exe 3620 cc6b83f066e4d8e61d855de191a785c7.exe 3620 cc6b83f066e4d8e61d855de191a785c7.exe 3620 cc6b83f066e4d8e61d855de191a785c7.exe 3620 cc6b83f066e4d8e61d855de191a785c7.exe 3620 cc6b83f066e4d8e61d855de191a785c7.exe 3620 cc6b83f066e4d8e61d855de191a785c7.exe 3620 cc6b83f066e4d8e61d855de191a785c7.exe 3620 cc6b83f066e4d8e61d855de191a785c7.exe 3620 cc6b83f066e4d8e61d855de191a785c7.exe 3620 cc6b83f066e4d8e61d855de191a785c7.exe 3620 cc6b83f066e4d8e61d855de191a785c7.exe 3620 cc6b83f066e4d8e61d855de191a785c7.exe 3620 cc6b83f066e4d8e61d855de191a785c7.exe 3620 cc6b83f066e4d8e61d855de191a785c7.exe 3620 cc6b83f066e4d8e61d855de191a785c7.exe 3620 cc6b83f066e4d8e61d855de191a785c7.exe 3620 cc6b83f066e4d8e61d855de191a785c7.exe 3620 cc6b83f066e4d8e61d855de191a785c7.exe 3620 cc6b83f066e4d8e61d855de191a785c7.exe 3620 cc6b83f066e4d8e61d855de191a785c7.exe 3620 cc6b83f066e4d8e61d855de191a785c7.exe 3620 cc6b83f066e4d8e61d855de191a785c7.exe 3620 cc6b83f066e4d8e61d855de191a785c7.exe 3620 cc6b83f066e4d8e61d855de191a785c7.exe 3620 cc6b83f066e4d8e61d855de191a785c7.exe 3620 cc6b83f066e4d8e61d855de191a785c7.exe 3620 cc6b83f066e4d8e61d855de191a785c7.exe 3620 cc6b83f066e4d8e61d855de191a785c7.exe 3620 cc6b83f066e4d8e61d855de191a785c7.exe 3620 cc6b83f066e4d8e61d855de191a785c7.exe 3620 cc6b83f066e4d8e61d855de191a785c7.exe 3620 cc6b83f066e4d8e61d855de191a785c7.exe 3620 cc6b83f066e4d8e61d855de191a785c7.exe 3620 cc6b83f066e4d8e61d855de191a785c7.exe 3620 cc6b83f066e4d8e61d855de191a785c7.exe 3620 cc6b83f066e4d8e61d855de191a785c7.exe 3620 cc6b83f066e4d8e61d855de191a785c7.exe 3620 cc6b83f066e4d8e61d855de191a785c7.exe 3620 cc6b83f066e4d8e61d855de191a785c7.exe 3620 cc6b83f066e4d8e61d855de191a785c7.exe 3620 cc6b83f066e4d8e61d855de191a785c7.exe 3620 cc6b83f066e4d8e61d855de191a785c7.exe 3620 cc6b83f066e4d8e61d855de191a785c7.exe 3620 cc6b83f066e4d8e61d855de191a785c7.exe 3620 cc6b83f066e4d8e61d855de191a785c7.exe 3620 cc6b83f066e4d8e61d855de191a785c7.exe 3620 cc6b83f066e4d8e61d855de191a785c7.exe 3620 cc6b83f066e4d8e61d855de191a785c7.exe 3620 cc6b83f066e4d8e61d855de191a785c7.exe 3620 cc6b83f066e4d8e61d855de191a785c7.exe 3620 cc6b83f066e4d8e61d855de191a785c7.exe 3620 cc6b83f066e4d8e61d855de191a785c7.exe 3620 cc6b83f066e4d8e61d855de191a785c7.exe 3620 cc6b83f066e4d8e61d855de191a785c7.exe 3620 cc6b83f066e4d8e61d855de191a785c7.exe 3620 cc6b83f066e4d8e61d855de191a785c7.exe 3620 cc6b83f066e4d8e61d855de191a785c7.exe 3620 cc6b83f066e4d8e61d855de191a785c7.exe 3620 cc6b83f066e4d8e61d855de191a785c7.exe 3620 cc6b83f066e4d8e61d855de191a785c7.exe