Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
3Static
static
3HotkeyControl.dll
windows7-x64
1HotkeyControl.dll
windows10-2004-x64
1SimpleSoundPlayer.exe
windows7-x64
1SimpleSoundPlayer.exe
windows10-2004-x64
3ikpFlac.dll
windows7-x64
1ikpFlac.dll
windows10-2004-x64
1ikpMP3.dll
windows7-x64
1ikpMP3.dll
windows10-2004-x64
1irrKlang.NET4.dll
windows7-x64
1irrKlang.NET4.dll
windows10-2004-x64
1Analysis
-
max time kernel
140s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
22/07/2023, 15:28
Static task
static1
Behavioral task
behavioral1
Sample
HotkeyControl.dll
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
HotkeyControl.dll
Resource
win10v2004-20230703-en
Behavioral task
behavioral3
Sample
SimpleSoundPlayer.exe
Resource
win7-20230712-en
Behavioral task
behavioral4
Sample
SimpleSoundPlayer.exe
Resource
win10v2004-20230703-en
Behavioral task
behavioral5
Sample
ikpFlac.dll
Resource
win7-20230712-en
Behavioral task
behavioral6
Sample
ikpFlac.dll
Resource
win10v2004-20230703-en
Behavioral task
behavioral7
Sample
ikpMP3.dll
Resource
win7-20230712-en
Behavioral task
behavioral8
Sample
ikpMP3.dll
Resource
win10v2004-20230703-en
Behavioral task
behavioral9
Sample
irrKlang.NET4.dll
Resource
win7-20230712-en
Behavioral task
behavioral10
Sample
irrKlang.NET4.dll
Resource
win10v2004-20230703-en
General
-
Target
ikpMP3.dll
-
Size
160KB
-
MD5
86736caba7462f674ed846eab018d316
-
SHA1
e51d874f4b0a96baac976aec729f5fcd2839f704
-
SHA256
56d96a1b60a2b6b66c449782fd32f21ba18360d6c2bf9c2a6d73323be9ff853e
-
SHA512
08a2472a79b4fb9fd5c9be3707c1c6e2d52ad75b511447e22cb125b81d5f4ebc0e36d1a83bcdb3ce1117ccd184f508ded36dcc7aa58ef3927950ee1e94004319
-
SSDEEP
3072:u4vsEahcJAy45zlcEkKEJAg0FuT0tIzeK:u4taDpLkKoAOV
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 1236 wrote to memory of 3056 1236 rundll32.exe 76 PID 1236 wrote to memory of 3056 1236 rundll32.exe 76 PID 1236 wrote to memory of 3056 1236 rundll32.exe 76