Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
7Static
static
1CDMX Línea 1.zip
windows10-2004-x64
1railway/Ob...to.bmp
windows10-2004-x64
7railway/Ob...up.csv
windows10-2004-x64
1railway/Ob...lo.b3d
windows10-2004-x64
3railway/Ob...o2.b3d
windows10-2004-x64
3railway/Ob...UP.csv
windows10-2004-x64
1railway/Ob...ro.bmp
windows10-2004-x64
7railway/Ob...id.b3d
windows10-2004-x64
3railway/Ob...ov.b3d
windows10-2004-x64
3railway/Ob...01.bmp
windows10-2004-x64
7railway/Ob...04.bmp
windows10-2004-x64
7railway/Ob...op.b3d
windows10-2004-x64
3railway/Ob...op.bmp
windows10-2004-x64
7railway/Ob...p2.bmp
windows10-2004-x64
7railway/Ob...p3.bmp
windows10-2004-x64
7railway/Ob...p4.bmp
windows10-2004-x64
7railway/Ob...p5.bmp
windows10-2004-x64
7railway/Ob...up.bmp
windows10-2004-x64
7railway/Ob...ro.b3d
windows10-2004-x64
3railway/Ob...o2.b3d
windows10-2004-x64
3railway/Ob...to.bmp
windows10-2004-x64
7railway/Ob...o1.bmp
windows10-2004-x64
7railway/Ob...lL.csv
windows10-2004-x64
1railway/Ob...lR.csv
windows10-2004-x64
1railway/Ob...ro.bmp
windows10-2004-x64
7railway/Ob...ed.bmp
windows10-2004-x64
7railway/Ob...01.bmp
windows10-2004-x64
7railway/Ob...ro.b3d
windows10-2004-x64
3railway/Ob...o2.b3d
windows10-2004-x64
3railway/Ob...to.bmp
windows10-2004-x64
7railway/Ob...o1.bmp
windows10-2004-x64
7railway/Ob...lL.csv
windows10-2004-x64
1Analysis
-
max time kernel
222s -
max time network
346s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
02/05/2023, 18:29
Static task
static1
Behavioral task
behavioral1
Sample
CDMX Línea 1.zip
Resource
win10v2004-20230220-en
Behavioral task
behavioral2
Sample
railway/Object/1/Estaciones/1 Pantitlan/Concreto.bmp
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
railway/Object/1/Estaciones/1 Pantitlan/ESCsup.csv
Resource
win10v2004-20230220-en
Behavioral task
behavioral4
Sample
railway/Object/1/Estaciones/1 Pantitlan/Suelo.b3d
Resource
win10v2004-20230220-en
Behavioral task
behavioral5
Sample
railway/Object/1/Estaciones/1 Pantitlan/Techo2.b3d
Resource
win10v2004-20230220-en
Behavioral task
behavioral6
Sample
railway/Object/1/Estaciones/1 Pantitlan/WALLSUP.csv
Resource
win10v2004-20230220-en
Behavioral task
behavioral7
Sample
railway/Object/1/Estaciones/1 Pantitlan/letrero.bmp
Resource
win10v2004-20230220-en
Behavioral task
behavioral8
Sample
railway/Object/1/Estaciones/1 Pantitlan/mid.b3d
Resource
win10v2004-20230220-en
Behavioral task
behavioral9
Sample
railway/Object/1/Estaciones/1 Pantitlan/techoprov.b3d
Resource
win10v2004-20230220-en
Behavioral task
behavioral10
Sample
railway/Object/1/Estaciones/1 Pantitlan/texture01.bmp
Resource
win10v2004-20230221-en
Behavioral task
behavioral11
Sample
railway/Object/1/Estaciones/1 Pantitlan/texture04.bmp
Resource
win10v2004-20230220-en
Behavioral task
behavioral12
Sample
railway/Object/1/Estaciones/1 Pantitlan/top.b3d
Resource
win10v2004-20230220-en
Behavioral task
behavioral13
Sample
railway/Object/1/Estaciones/1 Pantitlan/top.bmp
Resource
win10v2004-20230220-en
Behavioral task
behavioral14
Sample
railway/Object/1/Estaciones/1 Pantitlan/top2.bmp
Resource
win10v2004-20230220-en
Behavioral task
behavioral15
Sample
railway/Object/1/Estaciones/1 Pantitlan/top3.bmp
Resource
win10v2004-20230220-en
Behavioral task
behavioral16
Sample
railway/Object/1/Estaciones/1 Pantitlan/top4.bmp
Resource
win10v2004-20230220-en
Behavioral task
behavioral17
Sample
railway/Object/1/Estaciones/1 Pantitlan/top5.bmp
Resource
win10v2004-20230220-en
Behavioral task
behavioral18
Sample
railway/Object/1/Estaciones/1 Pantitlan/wallsup.bmp
Resource
win10v2004-20230221-en
Behavioral task
behavioral19
Sample
railway/Object/1/Estaciones/10 Pino/Centro.b3d
Resource
win10v2004-20230220-en
Behavioral task
behavioral20
Sample
railway/Object/1/Estaciones/10 Pino/Centro2.b3d
Resource
win10v2004-20230220-en
Behavioral task
behavioral21
Sample
railway/Object/1/Estaciones/10 Pino/Concreto.bmp
Resource
win10v2004-20230220-en
Behavioral task
behavioral22
Sample
railway/Object/1/Estaciones/10 Pino/Concreto1.bmp
Resource
win10v2004-20230221-en
Behavioral task
behavioral23
Sample
railway/Object/1/Estaciones/10 Pino/WallL.csv
Resource
win10v2004-20230220-en
Behavioral task
behavioral24
Sample
railway/Object/1/Estaciones/10 Pino/WallR.csv
Resource
win10v2004-20230220-en
Behavioral task
behavioral25
Sample
railway/Object/1/Estaciones/10 Pino/letrero.bmp
Resource
win10v2004-20230220-en
Behavioral task
behavioral26
Sample
railway/Object/1/Estaciones/10 Pino/pared.bmp
Resource
win10v2004-20230220-en
Behavioral task
behavioral27
Sample
railway/Object/1/Estaciones/10 Pino/texture01.bmp
Resource
win10v2004-20230221-en
Behavioral task
behavioral28
Sample
railway/Object/1/Estaciones/11 Isabel/Centro.b3d
Resource
win10v2004-20230220-en
Behavioral task
behavioral29
Sample
railway/Object/1/Estaciones/11 Isabel/Centro2.b3d
Resource
win10v2004-20230220-en
Behavioral task
behavioral30
Sample
railway/Object/1/Estaciones/11 Isabel/Concreto.bmp
Resource
win10v2004-20230220-en
Behavioral task
behavioral31
Sample
railway/Object/1/Estaciones/11 Isabel/Concreto1.bmp
Resource
win10v2004-20230220-en
Behavioral task
behavioral32
Sample
railway/Object/1/Estaciones/11 Isabel/WallL.csv
Resource
win10v2004-20230220-en
General
-
Target
CDMX Línea 1.zip
-
Size
168.8MB
-
MD5
db30831475267b3b1115a36fe9c9c036
-
SHA1
74728719c6cf0ce56f675492e2d273419978cad3
-
SHA256
165ff0b7591afc3735ba3a16b21d12a61cda20aec7dc6fb6c346a65856d54394
-
SHA512
794632a6bd0a6a0800cd30845e64b86acb7eda4fd706aa7e02a946255bb5730db46f8332effbfdd223217b2dede07dad477af641b8a0ce52d7dd4b9a391de575
-
SSDEEP
3145728:SMAh+PBMmfUxtKBS6X1Ewf2LNDd+TpKRkb8kwNlR34HMnWxmdZ9Bcd3Iyyzb/tMV:SytW/6X1ERLZOpAlwJx+Z9EyzK6K
Malware Config
Signatures
Processes
-
C:\Windows\Explorer.exeC:\Windows\Explorer.exe /idlist,,"C:\Users\Admin\AppData\Local\Temp\CDMX Línea 1.zip"1⤵PID:4928
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:4888