Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
8Static
static
3KeyGen @RdpXL.exe
windows7-x64
5KeyGen @RdpXL.exe
windows10-2004-x64
5Mass @RDpXL.exe
windows7-x64
1Mass @RDpXL.exe
windows10-2004-x64
1NL Checker @RdpXL.exe
windows7-x64
8NL Checker @RdpXL.exe
windows10-2004-x64
8NLBrute @RdpXL.exe
windows7-x64
1NLBrute @RdpXL.exe
windows10-2004-x64
1NS2.exe
windows7-x64
1NS2.exe
windows10-2004-x64
1masscan.exe
windows7-x64
1masscan.exe
windows10-2004-x64
1winrar-x64-600.exe
windows7-x64
1winrar-x64-600.exe
windows10-2004-x64
1Analysis
-
max time kernel
143s -
max time network
134s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
08/09/2022, 14:58
Behavioral task
behavioral1
Sample
KeyGen @RdpXL.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
KeyGen @RdpXL.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
Mass @RDpXL.exe
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
Mass @RDpXL.exe
Resource
win10v2004-20220901-en
Behavioral task
behavioral5
Sample
NL Checker @RdpXL.exe
Resource
win7-20220812-en
Behavioral task
behavioral6
Sample
NL Checker @RdpXL.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral7
Sample
NLBrute @RdpXL.exe
Resource
win7-20220812-en
Behavioral task
behavioral8
Sample
NLBrute @RdpXL.exe
Resource
win10v2004-20220901-en
Behavioral task
behavioral9
Sample
NS2.exe
Resource
win7-20220812-en
Behavioral task
behavioral10
Sample
NS2.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral11
Sample
masscan.exe
Resource
win7-20220901-en
Behavioral task
behavioral12
Sample
masscan.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral13
Sample
winrar-x64-600.exe
Resource
win7-20220812-en
Behavioral task
behavioral14
Sample
winrar-x64-600.exe
Resource
win10v2004-20220812-en
General
-
Target
winrar-x64-600.exe
-
Size
3.2MB
-
MD5
f23c099f805e851adca53df8f54318c5
-
SHA1
a39b96f0b50cfef01b873b819f05991d37713d86
-
SHA256
d61a8532f713407bd80a5099c818bbed391620e3891af00a68ef584e33be247a
-
SHA512
c161d760070a133f249fba8730fa7268435b3c7f32f5cfa59ec228f3c7a94e915f0a201749e234df0314f1b436d8d46365bf1a7fc118a9b34e8f7419cb556b71
-
SSDEEP
98304:vRCBfKEsFUweKrScGn3Wdiqaa9tZnuSkDGqRgajpx:vRJRSlWdijsZuSktjpx
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 4808 winrar-x64-600.exe 4808 winrar-x64-600.exe