Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

8

3km2-20120...��.chm

windows7-x64

1

3km2-20120...��.chm

windows10-2004-x64

1

3km2-20120...cn.url

windows7-x64

1

3km2-20120...cn.url

windows10-2004-x64

1

3km2-20120...er.exe

windows7-x64

1

3km2-20120...er.exe

windows10-2004-x64

1

3km2-20120...er.exe

windows7-x64

1

3km2-20120...er.exe

windows10-2004-x64

1

3km2-20120...er.exe

windows7-x64

1

3km2-20120...er.exe

windows10-2004-x64

1

3km2-20120...te.exe

windows7-x64

1

3km2-20120...te.exe

windows10-2004-x64

1

3km2-20120...rv.exe

windows7-x64

8

3km2-20120...rv.exe

windows10-2004-x64

8

3km2-20120...al.dll

windows7-x64

1

3km2-20120...al.dll

windows10-2004-x64

1

3km2-20120...er.exe

windows7-x64

9

3km2-20120...er.exe

windows10-2004-x64

9

3km2-20120...le.dll

windows7-x64

9

3km2-20120...le.dll

windows10-2004-x64

9

3km2-20120...te.exe

windows7-x64

1

3km2-20120...te.exe

windows10-2004-x64

1

3km2-20120...te.exe

windows7-x64

1

3km2-20120...te.exe

windows10-2004-x64

1

3km2-20120...��.exe

windows7-x64

1

3km2-20120...��.exe

windows10-2004-x64

1

3km2-20120...ne.exe

windows7-x64

1

3km2-20120...ne.exe

windows10-2004-x64

1

3km2-20120...��.bat

windows7-x64

1

3km2-20120...��.bat

windows10-2004-x64

1

3km2-20120...��.exe

windows7-x64

1

3km2-20120...��.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    33s
  • max time network
    42s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    27/11/2022, 14:41

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    3km2-20120528[1117]/3K20120528(0404)合击引擎/3km2.com.cn.url

  • Size

    187B

  • MD5

    f2b2a3fc83bd2a514240f88f7d81cdcb

  • SHA1

    f8f496bb310d030a7cce278db2e226ced284edd2

  • SHA256

    dd5c64bea3a3f7e8b3b3384d1ed134d34fabdd547c6b2930377ba73ccc28599f

  • SHA512

    fa2e49a23c0ffcceb288370767abe8d8b251b070934d155ce6b67dce076d2d3d09845e9102dfbee27568b0d3ae3c2342dd9f1bfaaf0d6481074c12ad0f916328

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\System32\rundll32.exe
    "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL C:\Users\Admin\AppData\Local\Temp\3km2-20120528[1117]\3K20120528(0404)合击引擎\3km2.com.cn.url
    1⤵
      PID:1608

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1608-54-0x000007FEFBB21000-0x000007FEFBB23000-memory.dmp

      Filesize

      8KB

      Download