Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
7Static
static
3SIM Ver 2....ST.zip
windows7-x64
1SIM Ver 2....ST.zip
windows10-2004-x64
1SIM Ver 2....er.zip
windows7-x64
1SIM Ver 2....er.zip
windows10-2004-x64
1SIM_Installer.exe
windows7-x64
7SIM_Installer.exe
windows10-2004-x64
7SIM Ver 2....14.pdf
windows7-x64
1SIM Ver 2....14.pdf
windows10-2004-x64
1SIM Ver 2....Ex.dll
windows7-x64
1SIM Ver 2....Ex.dll
windows10-2004-x64
1SIM Ver 2....er.exe
windows7-x64
1SIM Ver 2....er.exe
windows10-2004-x64
1SIM Ver 2....config
windows7-x64
3SIM Ver 2....config
windows10-2004-x64
3SIM Ver 2....ro.dll
windows7-x64
1SIM Ver 2....ro.dll
windows10-2004-x64
1SIM Ver 2....rs.dll
windows7-x64
1SIM Ver 2....rs.dll
windows10-2004-x64
1SIM Ver 2....on.dll
windows7-x64
1SIM Ver 2....on.dll
windows10-2004-x64
1SIM Ver 2....ql.dll
windows7-x64
1SIM Ver 2....ql.dll
windows10-2004-x64
1SIM Ver 2....ma.sql
windows7-x64
3SIM Ver 2....ma.sql
windows10-2004-x64
3SIM Ver 2....1.json
windows7-x64
3SIM Ver 2....1.json
windows10-2004-x64
3SIM Ver 2....et.dll
windows7-x64
1SIM Ver 2....et.dll
windows10-2004-x64
1SIM Ver 2....IM.exe
windows7-x64
1SIM Ver 2....IM.exe
windows10-2004-x64
1SIM Ver 2....ic.key
windows7-x64
3SIM Ver 2....ic.key
windows10-2004-x64
3Analysis
-
max time kernel
152s -
max time network
168s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
03/05/2023, 07:56
Static task
static1
Behavioral task
behavioral1
Sample
SIM Ver 2.1.0_BMS_LAST_TEST.zip
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
SIM Ver 2.1.0_BMS_LAST_TEST.zip
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
SIM Ver 2.1.0_BMS_LAST_TEST/1.SIM Ver 2.1.0_BMS_Cambodia_TEST_20210312/SIM_Installer.zip
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
SIM Ver 2.1.0_BMS_LAST_TEST/1.SIM Ver 2.1.0_BMS_Cambodia_TEST_20210312/SIM_Installer.zip
Resource
win10v2004-20230220-en
Behavioral task
behavioral5
Sample
SIM_Installer.exe
Resource
win7-20230220-en
Behavioral task
behavioral6
Sample
SIM_Installer.exe
Resource
win10v2004-20230221-en
Behavioral task
behavioral7
Sample
SIM Ver 2.1.0_BMS_LAST_TEST/3.SIM DBSchema_20210312/SIM DBSchema_20210312/doc/DBSchemaManager_v1.0.0_UserGuide_20201014.pdf
Resource
win7-20230220-en
Behavioral task
behavioral8
Sample
SIM Ver 2.1.0_BMS_LAST_TEST/3.SIM DBSchema_20210312/SIM DBSchema_20210312/doc/DBSchemaManager_v1.0.0_UserGuide_20201014.pdf
Resource
win10v2004-20230220-en
Behavioral task
behavioral9
Sample
SIM Ver 2.1.0_BMS_LAST_TEST/3.SIM DBSchema_20210312/SIM DBSchema_20210312/exe/ControlzEx.dll
Resource
win7-20230220-en
Behavioral task
behavioral10
Sample
SIM Ver 2.1.0_BMS_LAST_TEST/3.SIM DBSchema_20210312/SIM DBSchema_20210312/exe/ControlzEx.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral11
Sample
SIM Ver 2.1.0_BMS_LAST_TEST/3.SIM DBSchema_20210312/SIM DBSchema_20210312/exe/DBSchemaManager.exe
Resource
win7-20230220-en
Behavioral task
behavioral12
Sample
SIM Ver 2.1.0_BMS_LAST_TEST/3.SIM DBSchema_20210312/SIM DBSchema_20210312/exe/DBSchemaManager.exe
Resource
win10v2004-20230220-en
Behavioral task
behavioral13
Sample
SIM Ver 2.1.0_BMS_LAST_TEST/3.SIM DBSchema_20210312/SIM DBSchema_20210312/exe/DBSchemaManager.exe.config
Resource
win7-20230220-en
Behavioral task
behavioral14
Sample
SIM Ver 2.1.0_BMS_LAST_TEST/3.SIM DBSchema_20210312/SIM DBSchema_20210312/exe/DBSchemaManager.exe.config
Resource
win10v2004-20230220-en
Behavioral task
behavioral15
Sample
SIM Ver 2.1.0_BMS_LAST_TEST/3.SIM DBSchema_20210312/SIM DBSchema_20210312/exe/MahApps.Metro.dll
Resource
win7-20230220-en
Behavioral task
behavioral16
Sample
SIM Ver 2.1.0_BMS_LAST_TEST/3.SIM DBSchema_20210312/SIM DBSchema_20210312/exe/MahApps.Metro.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral17
Sample
SIM Ver 2.1.0_BMS_LAST_TEST/3.SIM DBSchema_20210312/SIM DBSchema_20210312/exe/Microsoft.Xaml.Behaviors.dll
Resource
win7-20230220-en
Behavioral task
behavioral18
Sample
SIM Ver 2.1.0_BMS_LAST_TEST/3.SIM DBSchema_20210312/SIM DBSchema_20210312/exe/Microsoft.Xaml.Behaviors.dll
Resource
win10v2004-20230221-en
Behavioral task
behavioral19
Sample
SIM Ver 2.1.0_BMS_LAST_TEST/3.SIM DBSchema_20210312/SIM DBSchema_20210312/exe/Newtonsoft.Json.dll
Resource
win7-20230220-en
Behavioral task
behavioral20
Sample
SIM Ver 2.1.0_BMS_LAST_TEST/3.SIM DBSchema_20210312/SIM DBSchema_20210312/exe/Newtonsoft.Json.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral21
Sample
SIM Ver 2.1.0_BMS_LAST_TEST/3.SIM DBSchema_20210312/SIM DBSchema_20210312/exe/Npgsql.dll
Resource
win7-20230220-en
Behavioral task
behavioral22
Sample
SIM Ver 2.1.0_BMS_LAST_TEST/3.SIM DBSchema_20210312/SIM DBSchema_20210312/exe/Npgsql.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral23
Sample
SIM Ver 2.1.0_BMS_LAST_TEST/3.SIM DBSchema_20210312/SIM DBSchema_20210312/exe/OriginalSchema.sql
Resource
win7-20230220-en
Behavioral task
behavioral24
Sample
SIM Ver 2.1.0_BMS_LAST_TEST/3.SIM DBSchema_20210312/SIM DBSchema_20210312/exe/OriginalSchema.sql
Resource
win10v2004-20230221-en
Behavioral task
behavioral25
Sample
SIM Ver 2.1.0_BMS_LAST_TEST/3.SIM DBSchema_20210312/SIM DBSchema_20210312/exe/[0] Standard File/standard_20210311.json
Resource
win7-20230220-en
Behavioral task
behavioral26
Sample
SIM Ver 2.1.0_BMS_LAST_TEST/3.SIM DBSchema_20210312/SIM DBSchema_20210312/exe/[0] Standard File/standard_20210311.json
Resource
win10v2004-20230220-en
Behavioral task
behavioral27
Sample
SIM Ver 2.1.0_BMS_LAST_TEST/3.SIM DBSchema_20210312/SIM DBSchema_20210312/exe/log4net.dll
Resource
win7-20230220-en
Behavioral task
behavioral28
Sample
SIM Ver 2.1.0_BMS_LAST_TEST/3.SIM DBSchema_20210312/SIM DBSchema_20210312/exe/log4net.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral29
Sample
SIM Ver 2.1.0_BMS_LAST_TEST/4 SIM For copy and paste/SIM.exe
Resource
win7-20230220-en
Behavioral task
behavioral30
Sample
SIM Ver 2.1.0_BMS_LAST_TEST/4 SIM For copy and paste/SIM.exe
Resource
win10v2004-20230221-en
Behavioral task
behavioral31
Sample
SIM Ver 2.1.0_BMS_LAST_TEST/license_IV762JS001_10_Basic.key
Resource
win7-20230220-en
Behavioral task
behavioral32
Sample
SIM Ver 2.1.0_BMS_LAST_TEST/license_IV762JS001_10_Basic.key
Resource
win10v2004-20230220-en
General
-
Target
SIM Ver 2.1.0_BMS_LAST_TEST/license_IV762JS001_10_Basic.key
-
Size
300B
-
MD5
8c16fd5505e982855d292ad76f7da820
-
SHA1
ae99ec3a98820b0f7349e315f438ed529ab3e836
-
SHA256
1b11ae1fb1a13b402d62bbb69173cf027b5fddd2a655236aa03c17e69cd3c7b1
-
SHA512
e389d8cd4ba8989e29f83e912383ffdaaae7444c32e66904ed96d34e97ef275dd657b420331ae39d3f1a775dc8726eee80db031c49cab44545a30358b76abc95
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000_Classes\Local Settings OpenWith.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4008 OpenWith.exe
Processes
-
C:\Windows\system32\cmd.execmd /c "C:\Users\Admin\AppData\Local\Temp\SIM Ver 2.1.0_BMS_LAST_TEST\license_IV762JS001_10_Basic.key"1⤵
- Modifies registry class
PID:2020
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:4008