Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
16s -
max time network
17s -
platform
windows7_x64 -
resource
win7-20240729-en -
resource tags
arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system -
submitted
11/09/2024, 16:59
Static task
static1
Behavioral task
behavioral1
Sample
7d92a43703c5bbc1d3d8c419640afb69d7c730818fbf32d2a3974113f5c97da9.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
7d92a43703c5bbc1d3d8c419640afb69d7c730818fbf32d2a3974113f5c97da9.exe
Resource
win10v2004-20240802-en
General
-
Target
7d92a43703c5bbc1d3d8c419640afb69d7c730818fbf32d2a3974113f5c97da9.exe
-
Size
1.8MB
-
MD5
05c8e42497fdd58cbcbb618e96a05703
-
SHA1
6d88e5c8d6e1173999568bd2714510f82423596f
-
SHA256
7d92a43703c5bbc1d3d8c419640afb69d7c730818fbf32d2a3974113f5c97da9
-
SHA512
d4d0ee25c4d142161d3c809f5c8ad8303bdda1b8357e3cff15b9b01bafbf13438deae9a76c1bc8bfdacb9afe223e3c25841ee7a627b61891bddd24de6ee7c689
-
SSDEEP
49152:6PacL+ONco6k7Byt/V7yQ74ZnnZxlT14z/C3hv+:lcLz/6yeZ74V7lxq/u+
Malware Config
Signatures
-
Drops file in Program Files directory 7 IoCs
description ioc Process File opened for modification C:\Program Files\Y2mate 7d92a43703c5bbc1d3d8c419640afb69d7c730818fbf32d2a3974113f5c97da9.exe File opened for modification C:\Program Files\Y2mate\Y2mate Downloader 7d92a43703c5bbc1d3d8c419640afb69d7c730818fbf32d2a3974113f5c97da9.exe File created C:\Program Files\Y2mate\Y2mate Downloader\__tmp_rar_sfx_access_check_259485214 7d92a43703c5bbc1d3d8c419640afb69d7c730818fbf32d2a3974113f5c97da9.exe File created C:\Program Files\Y2mate\Y2mate Downloader\PYG64.dll 7d92a43703c5bbc1d3d8c419640afb69d7c730818fbf32d2a3974113f5c97da9.exe File opened for modification C:\Program Files\Y2mate\Y2mate Downloader\PYG64.dll 7d92a43703c5bbc1d3d8c419640afb69d7c730818fbf32d2a3974113f5c97da9.exe File created C:\Program Files\Y2mate\Y2mate Downloader\version.dll 7d92a43703c5bbc1d3d8c419640afb69d7c730818fbf32d2a3974113f5c97da9.exe File opened for modification C:\Program Files\Y2mate\Y2mate Downloader\version.dll 7d92a43703c5bbc1d3d8c419640afb69d7c730818fbf32d2a3974113f5c97da9.exe