Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
7Static
static
3SIM Ver 2....ST.zip
windows7-x64
1SIM Ver 2....ST.zip
windows10-2004-x64
1SIM Ver 2....er.zip
windows7-x64
1SIM Ver 2....er.zip
windows10-2004-x64
1SIM_Installer.exe
windows7-x64
7SIM_Installer.exe
windows10-2004-x64
7SIM Ver 2....14.pdf
windows7-x64
1SIM Ver 2....14.pdf
windows10-2004-x64
1SIM Ver 2....Ex.dll
windows7-x64
1SIM Ver 2....Ex.dll
windows10-2004-x64
1SIM Ver 2....er.exe
windows7-x64
1SIM Ver 2....er.exe
windows10-2004-x64
1SIM Ver 2....config
windows7-x64
3SIM Ver 2....config
windows10-2004-x64
3SIM Ver 2....ro.dll
windows7-x64
1SIM Ver 2....ro.dll
windows10-2004-x64
1SIM Ver 2....rs.dll
windows7-x64
1SIM Ver 2....rs.dll
windows10-2004-x64
1SIM Ver 2....on.dll
windows7-x64
1SIM Ver 2....on.dll
windows10-2004-x64
1SIM Ver 2....ql.dll
windows7-x64
1SIM Ver 2....ql.dll
windows10-2004-x64
1SIM Ver 2....ma.sql
windows7-x64
3SIM Ver 2....ma.sql
windows10-2004-x64
3SIM Ver 2....1.json
windows7-x64
3SIM Ver 2....1.json
windows10-2004-x64
3SIM Ver 2....et.dll
windows7-x64
1SIM Ver 2....et.dll
windows10-2004-x64
1SIM Ver 2....IM.exe
windows7-x64
1SIM Ver 2....IM.exe
windows10-2004-x64
1SIM Ver 2....ic.key
windows7-x64
3SIM Ver 2....ic.key
windows10-2004-x64
3Analysis
-
max time kernel
155s -
max time network
34s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system -
submitted
03/05/2023, 07:56
Static task
static1
Behavioral task
behavioral1
Sample
SIM Ver 2.1.0_BMS_LAST_TEST.zip
Resource
win7-20230220-en
windows7-x64
Behavioral task
behavioral2
Sample
SIM Ver 2.1.0_BMS_LAST_TEST.zip
Resource
win10v2004-20230220-en
windows10-2004-x64
Behavioral task
behavioral3
Sample
SIM Ver 2.1.0_BMS_LAST_TEST/1.SIM Ver 2.1.0_BMS_Cambodia_TEST_20210312/SIM_Installer.zip
Resource
win7-20230220-en
windows7-x64
Behavioral task
behavioral4
Sample
SIM Ver 2.1.0_BMS_LAST_TEST/1.SIM Ver 2.1.0_BMS_Cambodia_TEST_20210312/SIM_Installer.zip
Resource
win10v2004-20230220-en
windows10-2004-x64
Behavioral task
behavioral5
Sample
SIM_Installer.exe
Resource
win7-20230220-en
windows7-x64
Behavioral task
behavioral6
Sample
SIM_Installer.exe
Resource
win10v2004-20230221-en
windows10-2004-x64
Behavioral task
behavioral7
Sample
SIM Ver 2.1.0_BMS_LAST_TEST/3.SIM DBSchema_20210312/SIM DBSchema_20210312/doc/DBSchemaManager_v1.0.0_UserGuide_20201014.pdf
Resource
win7-20230220-en
windows7-x64
Behavioral task
behavioral8
Sample
SIM Ver 2.1.0_BMS_LAST_TEST/3.SIM DBSchema_20210312/SIM DBSchema_20210312/doc/DBSchemaManager_v1.0.0_UserGuide_20201014.pdf
Resource
win10v2004-20230220-en
windows10-2004-x64
Behavioral task
behavioral9
Sample
SIM Ver 2.1.0_BMS_LAST_TEST/3.SIM DBSchema_20210312/SIM DBSchema_20210312/exe/ControlzEx.dll
Resource
win7-20230220-en
windows7-x64
Behavioral task
behavioral10
Sample
SIM Ver 2.1.0_BMS_LAST_TEST/3.SIM DBSchema_20210312/SIM DBSchema_20210312/exe/ControlzEx.dll
Resource
win10v2004-20230220-en
windows10-2004-x64
Behavioral task
behavioral11
Sample
SIM Ver 2.1.0_BMS_LAST_TEST/3.SIM DBSchema_20210312/SIM DBSchema_20210312/exe/DBSchemaManager.exe
Resource
win7-20230220-en
windows7-x64
Behavioral task
behavioral12
Sample
SIM Ver 2.1.0_BMS_LAST_TEST/3.SIM DBSchema_20210312/SIM DBSchema_20210312/exe/DBSchemaManager.exe
Resource
win10v2004-20230220-en
windows10-2004-x64
Behavioral task
behavioral13
Sample
SIM Ver 2.1.0_BMS_LAST_TEST/3.SIM DBSchema_20210312/SIM DBSchema_20210312/exe/DBSchemaManager.exe.config
Resource
win7-20230220-en
windows7-x64
Behavioral task
behavioral14
Sample
SIM Ver 2.1.0_BMS_LAST_TEST/3.SIM DBSchema_20210312/SIM DBSchema_20210312/exe/DBSchemaManager.exe.config
Resource
win10v2004-20230220-en
windows10-2004-x64
Behavioral task
behavioral15
Sample
SIM Ver 2.1.0_BMS_LAST_TEST/3.SIM DBSchema_20210312/SIM DBSchema_20210312/exe/MahApps.Metro.dll
Resource
win7-20230220-en
windows7-x64
Behavioral task
behavioral16
Sample
SIM Ver 2.1.0_BMS_LAST_TEST/3.SIM DBSchema_20210312/SIM DBSchema_20210312/exe/MahApps.Metro.dll
Resource
win10v2004-20230220-en
windows10-2004-x64
Behavioral task
behavioral17
Sample
SIM Ver 2.1.0_BMS_LAST_TEST/3.SIM DBSchema_20210312/SIM DBSchema_20210312/exe/Microsoft.Xaml.Behaviors.dll
Resource
win7-20230220-en
windows7-x64
Behavioral task
behavioral18
Sample
SIM Ver 2.1.0_BMS_LAST_TEST/3.SIM DBSchema_20210312/SIM DBSchema_20210312/exe/Microsoft.Xaml.Behaviors.dll
Resource
win10v2004-20230221-en
windows10-2004-x64
Behavioral task
behavioral19
Sample
SIM Ver 2.1.0_BMS_LAST_TEST/3.SIM DBSchema_20210312/SIM DBSchema_20210312/exe/Newtonsoft.Json.dll
Resource
win7-20230220-en
windows7-x64
Behavioral task
behavioral20
Sample
SIM Ver 2.1.0_BMS_LAST_TEST/3.SIM DBSchema_20210312/SIM DBSchema_20210312/exe/Newtonsoft.Json.dll
Resource
win10v2004-20230220-en
windows10-2004-x64
Behavioral task
behavioral21
Sample
SIM Ver 2.1.0_BMS_LAST_TEST/3.SIM DBSchema_20210312/SIM DBSchema_20210312/exe/Npgsql.dll
Resource
win7-20230220-en
windows7-x64
Behavioral task
behavioral22
Sample
SIM Ver 2.1.0_BMS_LAST_TEST/3.SIM DBSchema_20210312/SIM DBSchema_20210312/exe/Npgsql.dll
Resource
win10v2004-20230220-en
windows10-2004-x64
Behavioral task
behavioral23
Sample
SIM Ver 2.1.0_BMS_LAST_TEST/3.SIM DBSchema_20210312/SIM DBSchema_20210312/exe/OriginalSchema.sql
Resource
win7-20230220-en
windows7-x64
Behavioral task
behavioral24
Sample
SIM Ver 2.1.0_BMS_LAST_TEST/3.SIM DBSchema_20210312/SIM DBSchema_20210312/exe/OriginalSchema.sql
Resource
win10v2004-20230221-en
windows10-2004-x64
Behavioral task
behavioral25
Sample
SIM Ver 2.1.0_BMS_LAST_TEST/3.SIM DBSchema_20210312/SIM DBSchema_20210312/exe/[0] Standard File/standard_20210311.json
Resource
win7-20230220-en
windows7-x64
Behavioral task
behavioral26
Sample
SIM Ver 2.1.0_BMS_LAST_TEST/3.SIM DBSchema_20210312/SIM DBSchema_20210312/exe/[0] Standard File/standard_20210311.json
Resource
win10v2004-20230220-en
windows10-2004-x64
Behavioral task
behavioral27
Sample
SIM Ver 2.1.0_BMS_LAST_TEST/3.SIM DBSchema_20210312/SIM DBSchema_20210312/exe/log4net.dll
Resource
win7-20230220-en
windows7-x64
Behavioral task
behavioral28
Sample
SIM Ver 2.1.0_BMS_LAST_TEST/3.SIM DBSchema_20210312/SIM DBSchema_20210312/exe/log4net.dll
Resource
win10v2004-20230220-en
windows10-2004-x64
Behavioral task
behavioral29
Sample
SIM Ver 2.1.0_BMS_LAST_TEST/4 SIM For copy and paste/SIM.exe
Resource
win7-20230220-en
windows7-x64
Behavioral task
behavioral30
Sample
SIM Ver 2.1.0_BMS_LAST_TEST/4 SIM For copy and paste/SIM.exe
Resource
win10v2004-20230221-en
windows10-2004-x64
Behavioral task
behavioral31
Sample
SIM Ver 2.1.0_BMS_LAST_TEST/license_IV762JS001_10_Basic.key
Resource
win7-20230220-en
windows7-x64
Behavioral task
behavioral32
Sample
SIM Ver 2.1.0_BMS_LAST_TEST/license_IV762JS001_10_Basic.key
Resource
win10v2004-20230220-en
windows10-2004-x64
General
-
Target
SIM Ver 2.1.0_BMS_LAST_TEST/3.SIM DBSchema_20210312/SIM DBSchema_20210312/doc/DBSchemaManager_v1.0.0_UserGuide_20201014.pdf
-
Size
419KB
-
MD5
432a02139ebea829fc5955c0d4a74e0b
-
SHA1
cb86ff98cfc2e44e5c4c847547cc43e49bedd06f
-
SHA256
509e34d7c2ae7841f6014cdbc936922d3239a08148faac2b1ba3a4468f5e4e9d
-
SHA512
8a2af081c55924701857a62ec535e2c402304c20474b63f6f4de115e28a3bea8ee0f92eed5ce905b2f500f21a145f1b1ce62a665a3bc3b2a991e25c39b79d7c9
-
SSDEEP
12288:8JWQiP66ZbF4p/rv4OOOOO5S+mKiPip88cw7N9wxQJ/5wDfC:/QiP66Zbw/rv4OOOOO5d885H
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 820 AcroRd32.exe 820 AcroRd32.exe 820 AcroRd32.exe 820 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\SIM Ver 2.1.0_BMS_LAST_TEST\3.SIM DBSchema_20210312\SIM DBSchema_20210312\doc\DBSchemaManager_v1.0.0_UserGuide_20201014.pdf"1⤵
- Suspicious use of SetWindowsHookEx
PID:820