Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
10Static
static
VirtualBox...us.dll
windows7-x64
1VirtualBox...us.dll
windows10-2004-x64
1VirtualBox...in.exe
windows7-x64
8VirtualBox...in.exe
windows10-2004-x64
10VirtualBox...on.dll
windows7-x64
1VirtualBox...on.dll
windows10-2004-x64
1VirtualBox...CE.dll
windows7-x64
1VirtualBox...CE.dll
windows10-2004-x64
1VirtualBox...GM.dll
windows7-x64
1VirtualBox...GM.dll
windows10-2004-x64
1VirtualBox...DE.dll
windows7-x64
3VirtualBox...DE.dll
windows10-2004-x64
3VirtualBox...at.exe
windows7-x64
1VirtualBox...at.exe
windows10-2004-x64
1VirtualBox...OL.dll
windows7-x64
1VirtualBox...OL.dll
windows10-2004-x64
1VirtualBox...es.xml
windows7-x64
1VirtualBox...es.xml
windows10-2004-x64
1VirtualBox...32.dll
windows7-x64
3VirtualBox...32.dll
windows10-2004-x64
3VirtualBox...MP.dll
windows7-x64
1VirtualBox...MP.dll
windows10-2004-x64
3VirtualBox...IB.dll
windows7-x64
1VirtualBox...IB.dll
windows10-2004-x64
1VirtualBox...ls.dll
windows7-x64
1VirtualBox...ls.dll
windows10-2004-x64
1VirtualBox...pe.dll
windows7-x64
3VirtualBox...pe.dll
windows10-2004-x64
3VirtualBox...ib.dll
windows7-x64
1VirtualBox...ib.dll
windows10-2004-x64
1Analysis
-
max time kernel
34s -
max time network
47s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
15/12/2022, 17:16
Static task
static1
Behavioral task
behavioral1
Sample
VirtualBox-7.0.2-154219-Win/Focus.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
VirtualBox-7.0.2-154219-Win/Focus.dll
Resource
win10v2004-20220901-en
Behavioral task
behavioral3
Sample
VirtualBox-7.0.2-154219-Win/VirtualBox-7.0.2-154219-Win.exe
Resource
win7-20221111-en
Behavioral task
behavioral4
Sample
VirtualBox-7.0.2-154219-Win/VirtualBox-7.0.2-154219-Win.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
VirtualBox-7.0.2-154219-Win/cbutton.dll
Resource
win7-20221111-en
Behavioral task
behavioral6
Sample
VirtualBox-7.0.2-154219-Win/cbutton.dll
Resource
win10v2004-20220901-en
Behavioral task
behavioral7
Sample
VirtualBox-7.0.2-154219-Win/x86/ACE.dll
Resource
win7-20220812-en
Behavioral task
behavioral8
Sample
VirtualBox-7.0.2-154219-Win/x86/ACE.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral9
Sample
VirtualBox-7.0.2-154219-Win/x86/AGM.dll
Resource
win7-20220812-en
Behavioral task
behavioral10
Sample
VirtualBox-7.0.2-154219-Win/x86/AGM.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral11
Sample
VirtualBox-7.0.2-154219-Win/x86/AIDE.dll
Resource
win7-20220812-en
Behavioral task
behavioral12
Sample
VirtualBox-7.0.2-154219-Win/x86/AIDE.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral13
Sample
VirtualBox-7.0.2-154219-Win/x86/Acrobat/Acrobat.exe
Resource
win7-20220901-en
Behavioral task
behavioral14
Sample
VirtualBox-7.0.2-154219-Win/x86/Acrobat/Acrobat.exe
Resource
win10v2004-20221111-en
Behavioral task
behavioral15
Sample
VirtualBox-7.0.2-154219-Win/x86/Acrobat/Acrobat32OL.dll
Resource
win7-20221111-en
Behavioral task
behavioral16
Sample
VirtualBox-7.0.2-154219-Win/x86/Acrobat/Acrobat32OL.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral17
Sample
VirtualBox-7.0.2-154219-Win/x86/Acrobat/Adobe.Acrobat.Dependencies.xml
Resource
win7-20220812-en
Behavioral task
behavioral18
Sample
VirtualBox-7.0.2-154219-Win/x86/Acrobat/Adobe.Acrobat.Dependencies.xml
Resource
win10v2004-20220812-en
Behavioral task
behavioral19
Sample
VirtualBox-7.0.2-154219-Win/x86/Acrobat/Onix32.dll
Resource
win7-20220812-en
Behavioral task
behavioral20
Sample
VirtualBox-7.0.2-154219-Win/x86/Acrobat/Onix32.dll
Resource
win10v2004-20220901-en
Behavioral task
behavioral21
Sample
VirtualBox-7.0.2-154219-Win/x86/AdobeXMP.dll
Resource
win7-20221111-en
Behavioral task
behavioral22
Sample
VirtualBox-7.0.2-154219-Win/x86/AdobeXMP.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral23
Sample
VirtualBox-7.0.2-154219-Win/x86/BIB.dll
Resource
win7-20220812-en
Behavioral task
behavioral24
Sample
VirtualBox-7.0.2-154219-Win/x86/BIB.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral25
Sample
VirtualBox-7.0.2-154219-Win/x86/BIBUtils.dll
Resource
win7-20221111-en
Behavioral task
behavioral26
Sample
VirtualBox-7.0.2-154219-Win/x86/BIBUtils.dll
Resource
win10v2004-20220901-en
Behavioral task
behavioral27
Sample
VirtualBox-7.0.2-154219-Win/x86/CoolType.dll
Resource
win7-20220812-en
Behavioral task
behavioral28
Sample
VirtualBox-7.0.2-154219-Win/x86/CoolType.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral29
Sample
VirtualBox-7.0.2-154219-Win/x86/JP2KLib.dll
Resource
win7-20220812-en
Behavioral task
behavioral30
Sample
VirtualBox-7.0.2-154219-Win/x86/JP2KLib.dll
Resource
win10v2004-20220812-en
General
-
Target
VirtualBox-7.0.2-154219-Win/Focus.dll
-
Size
69KB
-
MD5
b2dc28e6f5c1a009e170ee757edfbbde
-
SHA1
eeb434c436f90d34f8afc5bbb2aed274c1fcab85
-
SHA256
a8c85834569b0e6415279ace2b081cd4ddecd0b5251f97ad9ee552b95b3eb913
-
SHA512
36d681b08a5c590f7f55433354a479dbeff7277ee629f129a9594bd3914dda793103138b68c27abb55a3935b9670d08e944dd42fa014b40d6201aa3160df706b
-
SSDEEP
1536:1BatzfxEtW3kG6T9ylchO/rbgtZeoGh6Kyjwji3hkj:jE0DT9ylchO/rEtK3EiNj
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 7 IoCs
description pid Process procid_target PID 2012 wrote to memory of 1580 2012 rundll32.exe 28 PID 2012 wrote to memory of 1580 2012 rundll32.exe 28 PID 2012 wrote to memory of 1580 2012 rundll32.exe 28 PID 2012 wrote to memory of 1580 2012 rundll32.exe 28 PID 2012 wrote to memory of 1580 2012 rundll32.exe 28 PID 2012 wrote to memory of 1580 2012 rundll32.exe 28 PID 2012 wrote to memory of 1580 2012 rundll32.exe 28
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\VirtualBox-7.0.2-154219-Win\Focus.dll,#11⤵
- Suspicious use of WriteProcessMemory
PID:2012 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\VirtualBox-7.0.2-154219-Win\Focus.dll,#12⤵PID:1580
-