a40626fbe1122175c403f8510e1f6ad41cee213a87ce8252305e32e5071a170a

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

Static

static

bca3772529...45.exe

windows7-x64

bca3772529...45.exe

windows10-2004-x64

bccb34575f...72.exe

windows7-x64

bccb34575f...72.exe

windows10-2004-x64

bcf1af9a5a...be.exe

windows7-x64

bcf1af9a5a...be.exe

windows10-2004-x64

bcf783e363...97.exe

windows7-x64

bcf783e363...97.exe

windows10-2004-x64

bd515574dc...8c.exe

windows7-x64

bd515574dc...8c.exe

windows10-2004-x64

bd68ca7605...39.exe

windows7-x64

bd68ca7605...39.exe

windows10-2004-x64

bd707a0357...e3.exe

windows7-x64

bd707a0357...e3.exe

windows10-2004-x64

bd7edfedeb...0b.exe

windows7-x64

bd7edfedeb...0b.exe

windows10-2004-x64

bdad1ff46d...f2.exe

windows7-x64

bdad1ff46d...f2.exe

windows10-2004-x64

bdae9ff159...df.exe

windows7-x64

bdae9ff159...df.exe

windows10-2004-x64

be01d2552c...1c.exe

windows7-x64

be01d2552c...1c.exe

windows10-2004-x64

be077774c9...87.exe

windows7-x64

be077774c9...87.exe

windows10-2004-x64

be0a8aeb7e...56.exe

windows7-x64

be0a8aeb7e...56.exe

windows10-2004-x64

be1643898c...f5.exe

windows7-x64

be1643898c...f5.exe

windows10-2004-x64

be183db6d4...94.exe

windows7-x64

be183db6d4...94.exe

windows10-2004-x64

be2375e810...94.exe

windows7-x64

be2375e810...94.exe

windows10-2004-x64

Analysis

max time kernel
119s
max time network
126s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
22/03/2025, 06:15

Sharing

Copy URL

Twitter E-mail

Static task

static1

9 signatures

Behavioral task

behavioral1

Sample

bca3772529d1a336233bb4e59a704d5217e6e1f7b80222d2d028bfc816cb5445.exe

Resource

win7-20240903-en

discovery persistence privilege_escalation spyware stealer

windows7-x64

12 signatures

150 seconds

Behavioral task

behavioral2

Sample

bca3772529d1a336233bb4e59a704d5217e6e1f7b80222d2d028bfc816cb5445.exe

Resource

win10v2004-20250314-en

credential_access discovery persistence privilege_escalation spyware stealer

windows10-2004-x64

14 signatures

150 seconds

Behavioral task

behavioral3

Sample

bccb34575fb2db34d4a29075cb2f9aa39904b7d5412695545f2240c00fbb0472.exe

Resource

win7-20240903-en

collection credential_access discovery persistence spyware stealer

windows7-x64

19 signatures

150 seconds

Behavioral task

behavioral4

Sample

bccb34575fb2db34d4a29075cb2f9aa39904b7d5412695545f2240c00fbb0472.exe

Resource

win10v2004-20250314-en

collection credential_access discovery persistence spyware stealer

windows10-2004-x64

19 signatures

150 seconds

Behavioral task

behavioral5

Sample

bcf1af9a5a93ae74ea1c79da9951c5be.exe

Resource

win7-20241023-en

njrat hacked defense_evasion discovery persistence privilege_escalation trojan

windows7-x64

13 signatures

150 seconds

Behavioral task

behavioral6

Sample

bcf1af9a5a93ae74ea1c79da9951c5be.exe

Resource

win10v2004-20250314-en

defense_evasion discovery persistence privilege_escalation

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral7

Sample

bcf783e363557f5bdd4014c159ae2497.exe

Resource

win7-20241010-en

discovery

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral8

Sample

bcf783e363557f5bdd4014c159ae2497.exe

Resource

win10v2004-20250314-en

discovery

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral9

Sample

bd515574dc1cb379674710f110e907d8cd72a5e4c5eb90d464fbee847b71718c.exe

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

bd515574dc1cb379674710f110e907d8cd72a5e4c5eb90d464fbee847b71718c.exe

Resource

win10v2004-20250314-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

bd68ca7605316450c87b9218d2dbe19d8c5694e07b93f320f3ca4a9ad902c139.exe

Resource

win7-20240729-en

remcos host discovery persistence rat spyware stealer

windows7-x64

13 signatures

150 seconds

Behavioral task

behavioral12

Sample

bd68ca7605316450c87b9218d2dbe19d8c5694e07b93f320f3ca4a9ad902c139.exe

Resource

win10v2004-20250314-en

remcos host discovery persistence rat

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral13

Sample

bd707a0357b19ea6953d47900bb051e3.exe

Resource

win7-20240903-en

defense_evasion

windows7-x64

11 signatures

150 seconds

Behavioral task

behavioral14

Sample

bd707a0357b19ea6953d47900bb051e3.exe

Resource

win10v2004-20250313-en

defense_evasion

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral15

Sample

bd7edfedebe8a680d801ffd5b2415cd3877e95c78edb8cfc44eaae3e0e9a1e0b.exe

Resource

win7-20250207-en

persistence privilege_escalation

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral16

Sample

bd7edfedebe8a680d801ffd5b2415cd3877e95c78edb8cfc44eaae3e0e9a1e0b.exe

Resource

win10v2004-20250314-en

persistence privilege_escalation

windows10-2004-x64

10 signatures

150 seconds

Behavioral task

behavioral17

Sample

bdad1ff46d46963cc687d5f6889c9ef2.exe

Resource

win7-20240903-en

metamorpherrat discovery persistence rat stealer trojan

windows7-x64

10 signatures

150 seconds

Behavioral task

behavioral18

Sample

bdad1ff46d46963cc687d5f6889c9ef2.exe

Resource

win10v2004-20250314-en

metamorpherrat discovery persistence rat stealer trojan

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral19

Sample

bdae9ff15952ccdfec0be80562f1cbdf.exe

Resource

win7-20240903-en

discovery persistence

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral20

Sample

bdae9ff15952ccdfec0be80562f1cbdf.exe

Resource

win10v2004-20250314-en

discovery persistence

windows10-2004-x64

10 signatures

150 seconds

Behavioral task

behavioral21

Sample

be01d2552c64422f1b97721af2e07451309244c21e464bbe47b603043d95b21c.exe

Resource

win7-20240903-en

defense_evasion execution trojan

windows7-x64

14 signatures

150 seconds

Behavioral task

behavioral22

Sample

be01d2552c64422f1b97721af2e07451309244c21e464bbe47b603043d95b21c.exe

Resource

win10v2004-20250314-en

defense_evasion execution trojan

windows10-2004-x64

17 signatures

150 seconds

Behavioral task

behavioral23

Sample

be077774c9e78bbe8c9388aa7d552de77e9ef40ec732ea193da049a0db2e5787.exe

Resource

win7-20240903-en

growtopia defense_evasion discovery persistence stealer trojan

windows7-x64

11 signatures

150 seconds

Behavioral task

behavioral24

Sample

be077774c9e78bbe8c9388aa7d552de77e9ef40ec732ea193da049a0db2e5787.exe

Resource

win10v2004-20250314-en

growtopia defense_evasion discovery persistence stealer trojan

windows10-2004-x64

9 signatures

150 seconds

Behavioral task

behavioral25

Sample

be0a8aeb7e1655bee6255bac9c2947ecef511b5f00e29933dfd9c7f39965bf56.exe

Resource

win7-20240903-en

discovery

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral26

Sample

be0a8aeb7e1655bee6255bac9c2947ecef511b5f00e29933dfd9c7f39965bf56.exe

Resource

win10v2004-20250314-en

discovery

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral27

Sample

be1643898cf51a24e38e4044d24ae1f5.exe

Resource

win7-20241023-en

discovery

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral28

Sample

be1643898cf51a24e38e4044d24ae1f5.exe

Resource

win10v2004-20250314-en

discovery

windows10-2004-x64

10 signatures

150 seconds

Behavioral task

behavioral29

Sample

be183db6d4b77c092496c69c3f389b94.exe

Resource

win7-20240903-en

dcrat defense_evasion execution infostealer rat trojan

windows7-x64

18 signatures

150 seconds

Behavioral task

behavioral30

Sample

be183db6d4b77c092496c69c3f389b94.exe

Resource

win10v2004-20250314-en

dcrat defense_evasion execution infostealer rat trojan

windows10-2004-x64

20 signatures

150 seconds

Behavioral task

behavioral31

Sample

be2375e810af4d76a0fc392d8acf2d1218cd2c21a6b8160be7f1f30ef7cf4694.exe

Resource

win7-20240903-en

collection discovery persistence privilege_escalation spyware stealer

windows7-x64

19 signatures

150 seconds

Behavioral task

behavioral32

Sample

be2375e810af4d76a0fc392d8acf2d1218cd2c21a6b8160be7f1f30ef7cf4694.exe

Resource

win10v2004-20250314-en

collection discovery persistence privilege_escalation spyware stealer

windows10-2004-x64

22 signatures

150 seconds

Report Analysis Logs

General

Target

bd515574dc1cb379674710f110e907d8cd72a5e4c5eb90d464fbee847b71718c.exe
Size

596KB
MD5

5ea4f8c51f94befe6bc2c902e46aa8c9
SHA1

19d71d34b5c1d4d286bb272d8a55613c2a62f050
SHA256

bd515574dc1cb379674710f110e907d8cd72a5e4c5eb90d464fbee847b71718c
SHA512

7230f0837ef38d12adf4db4e74a13e8c4797c2769c9d3ee96a4edca7b8aade0c586232cc5a6f84133a3ce8fe16b75a319476e5e243d8a7c269dd0c93c6712d00
SSDEEP

6144:5TKwX7FUOMlp3GhW3CjqEpra7zlVhe6VlWT8b9vwFniP+jEpVS+G9saQl4iLvhsu:RK9hUW8fAhPVle80wpVt8gJshYoKE

Score

1^/10

Malware Config

Signatures

Processes

C:\Users\Admin\AppData\Local\Temp\bd515574dc1cb379674710f110e907d8cd72a5e4c5eb90d464fbee847b71718c.exe
"C:\Users\Admin\AppData\Local\Temp\bd515574dc1cb379674710f110e907d8cd72a5e4c5eb90d464fbee847b71718c.exe"
1⤵
PID:1792

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1792-0-0x000007FEF6313000-0x000007FEF6314000-memory.dmp

Filesize
4KB

Download
memory/1792-1-0x0000000000270000-0x000000000030C000-memory.dmp

Filesize
624KB

Download