Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
14s -
max time network
20s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system -
submitted
12/10/2024, 15:02
Behavioral task
behavioral1
Sample
cock.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
cock.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
main.pyc
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
main.pyc
Resource
win10v2004-20241007-en
General
-
Target
cock.exe
-
Size
24.1MB
-
MD5
9563016e88ba02219a9b01caa4f1e878
-
SHA1
8573c706f0e1599aff903d2baaaa5e48c5db031e
-
SHA256
42cca10af9de328f1418d0a16c1a9c39dd524c1bed9af41a47130506fdf6da7f
-
SHA512
b126dacf89325de6e0ee2701dd8e34bd0beaac3eb94bd06f575df198c72ec8370796cca213e396e10e9716d60257d15dbcf9daa3a2d68fe6dde2c387b317807e
-
SSDEEP
393216:4qPnLFXlrG3c1kQSWsgIDOETgsvcGFYVgKwoApMpDskNcU/Q+QEsmqs:pPLFXNG3GkQS3gNEWlwotp3Q5S
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
pid Process 1248 cock.exe -
resource yara_rule behavioral1/files/0x000500000001c873-142.dat upx -
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 2164 wrote to memory of 1248 2164 cock.exe 29 PID 2164 wrote to memory of 1248 2164 cock.exe 29 PID 2164 wrote to memory of 1248 2164 cock.exe 29
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.4MB
MD569d4f13fbaeee9b551c2d9a4a94d4458
SHA169540d8dfc0ee299a7ff6585018c7db0662aa629
SHA256801317463bd116e603878c7c106093ba7db2bece11e691793e93065223fc7046
SHA5128e632f141daf44bc470f8ee677c6f0fdcbcacbfce1472d928576bf7b9f91d6b76639d18e386d5e1c97e538a8fe19dd2d22ea47ae1acf138a0925e3c6dd156378
-
Filesize
4B
MD5365c9bfeb7d89244f2ce01c1de44cb85
SHA1d7a03141d5d6b1e88b6b59ef08b6681df212c599
SHA256ceebae7b8927a3227e5303cf5e0f1f7b34bb542ad7250ac03fbcde36ec2f1508
SHA512d220d322a4053d84130567d626a9f7bb2fb8f0b854da1621f001826dc61b0ed6d3f91793627e6f0ac2ac27aea2b986b6a7a63427f05fe004d8a2adfbdadc13c1