Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    57s
  • max time network
    129s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230220-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
  • submitted
    14/06/2023, 15:19

General

  • Target

    Riot-setup-x64.exe

  • Size

    2.7MB

  • MD5

    ac48ec7c3a58f0441640b335fc2b54f7

  • SHA1

    f1758817f916861de8f9c6a8f88b24a45d584b44

  • SHA256

    ce377521a2b72f3fb4e5a36f587f3015bc6a30dc15353694821cd6de858ff909

  • SHA512

    73f5d90e9919b27b033da012856aedad309e13d1c91532a5a4484c0d3a2f50a52434c24737bd5a5dba0cf0077e2b881945e5bc09ab6c3869e65848628dffc7ce

  • SSDEEP

    49152:mOd9bL/1Kwwi9ffQlVw6/vZQEIR59yMcml1uGXzE/mLf8w0+kasgEQHs70Aw+1L0:JdzKy9f03vZLvO/j0ofX0jgHGw0LJW

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 2 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

Processes

  • C:\Users\Admin\AppData\Local\Temp\Riot-setup-x64.exe
    "C:\Users\Admin\AppData\Local\Temp\Riot-setup-x64.exe"
    1⤵
    • Loads dropped DLL
    PID:4464

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\nspC6E1.tmp\System.dll

    Filesize

    11KB

    MD5

    b0c77267f13b2f87c084fd86ef51ccfc

    SHA1

    f7543f9e9b4f04386dfbf33c38cbed1bf205afb3

    SHA256

    a0cac4cf4852895619bc7743ebeb89f9e4927ccdb9e66b1bcd92a4136d0f9c77

    SHA512

    f2b57a2eea00f52a3c7080f4b5f2bb85a7a9b9f16d12da8f8ff673824556c62a0f742b72be0fd82a2612a4b6dbd7e0fdc27065212da703c2f7e28d199696f66e

  • C:\Users\Admin\AppData\Local\Temp\nspC6E1.tmp\nsDialogs.dll

    Filesize

    9KB

    MD5

    eac1c3707970fe7c71b2d760c34763fa

    SHA1

    f275e659ad7798994361f6ccb1481050aba30ff8

    SHA256

    062c75ad650548750564ffd7aef8cd553773b5c26cae7f25a5749b13165194e3

    SHA512

    3415bd555cf47407c0ae62be0dbcba7173d2b33a371bf083ce908fc901811adb888b7787d11eb9d99a1a739cbd9d1c66e565db6cd678bdadaf753fbda14ffd09