Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

8

3km2-20120...��.chm

windows7-x64

1

3km2-20120...��.chm

windows10-2004-x64

1

3km2-20120...cn.url

windows7-x64

1

3km2-20120...cn.url

windows10-2004-x64

1

3km2-20120...er.exe

windows7-x64

1

3km2-20120...er.exe

windows10-2004-x64

1

3km2-20120...er.exe

windows7-x64

1

3km2-20120...er.exe

windows10-2004-x64

1

3km2-20120...er.exe

windows7-x64

1

3km2-20120...er.exe

windows10-2004-x64

1

3km2-20120...te.exe

windows7-x64

1

3km2-20120...te.exe

windows10-2004-x64

1

3km2-20120...rv.exe

windows7-x64

8

3km2-20120...rv.exe

windows10-2004-x64

8

3km2-20120...al.dll

windows7-x64

1

3km2-20120...al.dll

windows10-2004-x64

1

3km2-20120...er.exe

windows7-x64

9

3km2-20120...er.exe

windows10-2004-x64

9

3km2-20120...le.dll

windows7-x64

9

3km2-20120...le.dll

windows10-2004-x64

9

3km2-20120...te.exe

windows7-x64

1

3km2-20120...te.exe

windows10-2004-x64

1

3km2-20120...te.exe

windows7-x64

1

3km2-20120...te.exe

windows10-2004-x64

1

3km2-20120...��.exe

windows7-x64

1

3km2-20120...��.exe

windows10-2004-x64

1

3km2-20120...ne.exe

windows7-x64

1

3km2-20120...ne.exe

windows10-2004-x64

1

3km2-20120...��.bat

windows7-x64

1

3km2-20120...��.bat

windows10-2004-x64

1

3km2-20120...��.exe

windows7-x64

1

3km2-20120...��.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    91s
  • max time network
    157s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    27/11/2022, 14:41

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    3km2-20120528[1117]/3K20120528(0404)合击引擎/副将数据转换.exe

  • Size

    406KB

  • MD5

    a89c4a9a2f623c0fdd6c9fea68735bb3

  • SHA1

    b012a26192769a56a92446d820b06c902b06b08a

  • SHA256

    7f76aa96812819466576b11711efefb0b4e52be89b4e7c4b02cad717c6ae960a

  • SHA512

    fed6f747bbcea8ef611547db973dad24952e77dad4deb483e68de1ca77bc066cec9fe4fef9c96cbe19bb54c79c6950d434030ab30539e7224e0bf1b4f93b8ba8

  • SSDEEP

    12288:r39e2xgs3C9DOqLoBXkoXfp6gmplCMMVo:rNvxgs0DzoBBogGM+

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\3km2-20120528[1117]\3K20120528(0404)合击引擎\副将数据转换.exe
    "C:\Users\Admin\AppData\Local\Temp\3km2-20120528[1117]\3K20120528(0404)合击引擎\副将数据转换.exe"
    1⤵
      PID:4260

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/4260-132-0x0000000000400000-0x000000000052E000-memory.dmp

      Filesize

      1.2MB

      Download

    • memory/4260-133-0x0000000000400000-0x000000000052E000-memory.dmp

      Filesize

      1.2MB

      Download