Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

1

Five Night... 2.exe

windows7-x64

7

Five Night... 2.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    3s
  • platform
    windows7_x64
  • resource
    win7-20221111-en
  • resource tags

    arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
  • submitted
    03/02/2023, 19:44

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Five Nights At Freddys 2.exe

  • Size

    207.4MB

  • MD5

    9d566eebe86c45b00df3475a5e867dad

  • SHA1

    a1b7770ff5313e1ffcc5bd867f7e33a0cc470c4d

  • SHA256

    9a275aaab681cf7a15772b2e5163d75abe44418c0162715fca17b3f90c7f64ee

  • SHA512

    6bdfd0847ff780fd434957ef579ef78f2d8a8ad9c35c92d1526a62b3a51df59fcf13346729fb7af1333f3f97a72cd8743f565cacdc66ead5f0822489cb6fe5df

  • SSDEEP

    6291456:s3O+GWb5ACzpu5finrPbtGVHYqj8CdfB9/b2M:s3O+GyHbnrPbo1zfPb

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Five Nights At Freddys 2.exe
    "C:\Users\Admin\AppData\Local\Temp\Five Nights At Freddys 2.exe"
    1⤵
    • Loads dropped DLL
    PID:936

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\Temp\mrt497F.tmp\Perspective.mfx
    Filesize

    15KB

    MD5

    9f064bdcb066daa428db0ed9e33e785d

    SHA1

    3c0df73cf247ce49d1010fe0e2f722424fe43f4f

    SHA256

    090925a4cd961f22b1ecd2fba4ce04ab063e26507a1dc09b1d6a40c4860a8777

    SHA512

    4a510ce13c379e8cb5ccb9f9c69e28e9440f48156c8c4c1fef6987495cace7c028d45530ac961f47786e8f503f90c54310cb1ccf43d7fd584506461c1bd616d5

    Download Submit

  • \Users\Admin\AppData\Local\Temp\mrt497F.tmp\kcini.mfx
    Filesize

    28KB

    MD5

    8d086569a8b80fb85db3c9c93af299b5

    SHA1

    143ec5000967c64b994b4ff7eab9e429bff2d109

    SHA256

    a5618b90999455b6f8abe3b2849c96175427d27680a46c4386c94bebfb7727cc

    SHA512

    3eeff9e820a8f87493b7748c48197655be9a4a0fef1854dd2dba2cf04427bd15e927efb79a6dd2c9c9eb665c1e716d85c1fcd5b032aab17a175d8da601fda1e9

    Download Submit

  • \Users\Admin\AppData\Local\Temp\mrt497F.tmp\mmf2d3d9.dll
    Filesize

    1.1MB

    MD5

    216edca5011d2de83e3ab5e01bbbdbda

    SHA1

    49291814036dd68c81cb3479f6fd1b976b1ca30d

    SHA256

    1c0ec3ce3eacdcff742ed0fa88f8f942acec23383f13e5a049d83bd54a30cd07

    SHA512

    649905476ac60ebc29466d95a2835313afc708a0fec1715b62e1fc9fd643c8dc6d8a1c5bc44e74e546be7cf28547c0e03f4364ef780c546f04b8cd71fcd55335

    Download Submit

  • \Users\Admin\AppData\Local\Temp\mrt497F.tmp\mmfs2.dll
    Filesize

    459KB

    MD5

    3d377182bf625d57d50df332db8a09fa

    SHA1

    0fdb0f6c3c5d90e395ecd65f204e39a5a98ab19e

    SHA256

    0ce3a723492b37f10d3e142feff4b10396c8955b5365a3afbafd75a473a6af35

    SHA512

    625b43ba5f96fd31e387a2dedd67599ef340da9b77279f18ae0a0fbf9aa9640f428fd442c0fe9edc465b2310b004d7015953e762405e54a354224d4f5f35cc8e

    Download Submit

  • memory/936-54-0x0000000074ED1000-0x0000000074ED3000-memory.dmp

    Filesize

    8KB

    Download