Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

AMR Player...er.exe

windows7-x64

1

AMR Player...er.exe

windows10-2004-x64

1

AMR Player...OM.exe

windows7-x64

1

AMR Player...OM.exe

windows10-2004-x64

1

AMR Player...ec.dll

windows7-x64

3

AMR Player...ec.dll

windows10-2004-x64

3

AMR Player...at.dll

windows7-x64

3

AMR Player...at.dll

windows10-2004-x64

3

AMR Player/avutil.dll

windows7-x64

1

AMR Player/avutil.dll

windows10-2004-x64

1

AMR Player/bass.dll

windows7-x64

1

AMR Player/bass.dll

windows10-2004-x64

1

AMR Player/lpk.dll

windows7-x64

8

AMR Player/lpk.dll

windows10-2004-x64

8

AMR Player...C2.dll

windows7-x64

1

AMR Player...C2.dll

windows10-2004-x64

Analysis

  • max time kernel
    91s
  • max time network
    46s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    24/11/2022, 11:37

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    AMR Player/AMRPlayer_99D.COM.exe

  • Size

    810KB

  • MD5

    05e8d5fff2f13b37f7cbac6c24f0fef2

  • SHA1

    7fac1642d903f145600df1d9a24be7cdc7a24dab

  • SHA256

    0cb1b1dc6abdc046c47fc94163b5264b934fd4d53915e88153e5b99de211b91a

  • SHA512

    65b94812b719c7edc19e670fd998a4950eb7f00d8c7940ff34dfb7bf36d725111dd6e55df8e6e8991b577b5957ba941924869f10557863b2468d6c09db25cb5b

  • SSDEEP

    24576:tF2EwsMJsFgr442XJnhb+YI4aXAZw1LVK:bMJX29ocSVK

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\AMR Player\AMRPlayer_99D.COM.exe
    "C:\Users\Admin\AppData\Local\Temp\AMR Player\AMRPlayer_99D.COM.exe"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    PID:940
  • C:\Windows\system32\AUDIODG.EXE
    C:\Windows\system32\AUDIODG.EXE 0x574
    1⤵
      PID:1080

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/940-54-0x0000000075981000-0x0000000075983000-memory.dmp

      Filesize

      8KB

      Download

    • memory/940-55-0x0000000011000000-0x0000000011062000-memory.dmp

      Filesize

      392KB

      Download

    • memory/940-56-0x0000000011000000-0x0000000011062000-memory.dmp

      Filesize

      392KB

      Download