Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
147s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
15/03/2024, 11:58
Static task
static1
Behavioral task
behavioral1
Sample
e59b0264b2ec53a6769033e7a0846b9aacd0429dcf9a63ed7c73123f4561ac16.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e59b0264b2ec53a6769033e7a0846b9aacd0429dcf9a63ed7c73123f4561ac16.exe
Resource
win10v2004-20240226-en
General
-
Target
e59b0264b2ec53a6769033e7a0846b9aacd0429dcf9a63ed7c73123f4561ac16.exe
-
Size
8.4MB
-
MD5
04d708c99fae222c757198252e59ef17
-
SHA1
5d0073bca473b305ae0d98af9d200d25fe27c0e7
-
SHA256
e59b0264b2ec53a6769033e7a0846b9aacd0429dcf9a63ed7c73123f4561ac16
-
SHA512
16bd546dbdbe626d2bbe46e06f1b1c1cd24987cc38500be36b910af431fa52f78fc8836d40ccb2558ef30335899944277cb89a62bdb1a09e6a3dda0338a3a7a6
-
SSDEEP
196608:Thk3W1JdRbY7PPZZdT2MaYHe3yWqB5Sh3HBhuQFu5NLD:u3W1JLbYbBZdBCJ/h3HBhuQ8DX
Malware Config
Signatures
-
Drops file in Program Files directory 9 IoCs
description ioc Process File created C:\Program Files\Topaz Labs LLC\Topaz Video AI\Topaz Video AI.exe e59b0264b2ec53a6769033e7a0846b9aacd0429dcf9a63ed7c73123f4561ac16.exe File opened for modification C:\Program Files\Topaz Labs LLC\Topaz Video AI\Topaz Video AI.exe e59b0264b2ec53a6769033e7a0846b9aacd0429dcf9a63ed7c73123f4561ac16.exe File created C:\Program Files\Topaz Labs LLC\Topaz Video AI\login.exe e59b0264b2ec53a6769033e7a0846b9aacd0429dcf9a63ed7c73123f4561ac16.exe File opened for modification C:\Program Files\Topaz Labs LLC e59b0264b2ec53a6769033e7a0846b9aacd0429dcf9a63ed7c73123f4561ac16.exe File created C:\Program Files\Topaz Labs LLC\Topaz Video AI\__tmp_rar_sfx_access_check_240608500 e59b0264b2ec53a6769033e7a0846b9aacd0429dcf9a63ed7c73123f4561ac16.exe File created C:\Program Files\Topaz Labs LLC\Topaz Video AI\videoai.dll e59b0264b2ec53a6769033e7a0846b9aacd0429dcf9a63ed7c73123f4561ac16.exe File opened for modification C:\Program Files\Topaz Labs LLC\Topaz Video AI\videoai.dll e59b0264b2ec53a6769033e7a0846b9aacd0429dcf9a63ed7c73123f4561ac16.exe File opened for modification C:\Program Files\Topaz Labs LLC\Topaz Video AI\login.exe e59b0264b2ec53a6769033e7a0846b9aacd0429dcf9a63ed7c73123f4561ac16.exe File opened for modification C:\Program Files\Topaz Labs LLC\Topaz Video AI e59b0264b2ec53a6769033e7a0846b9aacd0429dcf9a63ed7c73123f4561ac16.exe