Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
67s -
max time network
51s -
platform
windows10-2004_x64 -
resource
win10v2004-20240419-en -
resource tags
arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system -
submitted
30/04/2024, 21:36
Static task
static1
Behavioral task
behavioral1
Sample
48dde4fea35fed7978d7d4c6b8ce33cfc3fc886b628d0d46fb927c8ffbe430b3.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
48dde4fea35fed7978d7d4c6b8ce33cfc3fc886b628d0d46fb927c8ffbe430b3.exe
Resource
win10v2004-20240419-en
General
-
Target
48dde4fea35fed7978d7d4c6b8ce33cfc3fc886b628d0d46fb927c8ffbe430b3.exe
-
Size
196KB
-
MD5
756dc2edc0d90e12f6a36d3d2385b135
-
SHA1
59dfa259a364169c8622e754db21a70c4ad51ba0
-
SHA256
48dde4fea35fed7978d7d4c6b8ce33cfc3fc886b628d0d46fb927c8ffbe430b3
-
SHA512
c0550ffcdab19267730b45be788ccb58c64ccad193af840723f720329284f99582ef7c92e626b0e5f5abf32950a2e1adf2295e072af156ab9fb3eb33a71693bb
-
SSDEEP
3072:9IZ1bk1FVvHcTeO4O9fcsW/QA2wem1ZV2REW3m7DtwlKJncpDwKwPRM0YuLpzX6M:SZlkhkzfbQz4/CcpD2zdj
Malware Config
Signatures
-
Drops file in Windows directory 3 IoCs
description ioc Process File opened for modification C:\Windows\system\RCX2F8C.tmp 48dde4fea35fed7978d7d4c6b8ce33cfc3fc886b628d0d46fb927c8ffbe430b3.exe File created C:\Windows\system\bot1.exe 48dde4fea35fed7978d7d4c6b8ce33cfc3fc886b628d0d46fb927c8ffbe430b3.exe File opened for modification C:\Windows\system\bot1.exe 48dde4fea35fed7978d7d4c6b8ce33cfc3fc886b628d0d46fb927c8ffbe430b3.exe