Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

6

Static

static

3

2022 Setting File.zip

windows10-2004-x64

1

Setting Fi...ry.dll

windows10-2004-x64

1

Setting Fi...ry.pdb

windows10-2004-x64

3

Setting Fi...cation

windows10-2004-x64

1

Setting Fi...rd.exe

windows10-2004-x64

1

Setting Fi...xe.xml

windows10-2004-x64

3

Setting Fi...nifest

windows10-2004-x64

3

Setting Fi...rd.pdb

windows10-2004-x64

3

Setting Fi...re.dll

windows10-2004-x64

1

Setting Fi...rd.exe

windows10-2004-x64

3

Setting Fi...es.dll

windows10-2004-x64

1

Setting Fi...es.dll

windows10-2004-x64

1

Setting Fi...er.mp4

windows10-2004-x64

6

Setting Fi...ng.mp4

windows10-2004-x64

6

Setting Fi...+D.mp4

windows10-2004-x64

6

Setting Fi...up.mp4

windows10-2004-x64

6

Setting Fi...ng.mp4

windows10-2004-x64

6

Setting Fi...ng.mp4

windows10-2004-x64

6

Setting Fi...ng.mp4

windows10-2004-x64

6

Setting Fi...eo.mp4

windows10-2004-x64

6

Setting Fi...d.docx

windows10-2004-x64

1

Setting Fi...l.docx

windows10-2004-x64

1

Analysis

  • max time kernel
    118s
  • max time network
    161s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    15/08/2023, 13:21

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Setting File/MINI KeyBoard/MINI KeyBoard-英文/MINI KeyBoard.exe.xml

  • Size

    856B

  • MD5

    273cf12126bac3199918416aac29257c

  • SHA1

    00d93258aabde3ed0904ddfee590363483c0140d

  • SHA256

    523055b9660fe832629c179c388b99bd76bc87d8fe96c8acd864aec9b539cbb8

  • SHA512

    f64f74411a1d1e8fe5c9ff1ba9b3cc0303dade740bf61e53ce3d384a8dfa69cdd9dcf7daebde26e105d539d812019b223f7bf01506f48e506c72463ac53d40c4

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE
    "C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\Setting File\MINI KeyBoard\MINI KeyBoard-英文\MINI KeyBoard.exe.xml"
    1⤵
      PID:1508
      • C:\Windows\system32\WerFault.exe
        C:\Windows\system32\WerFault.exe -u -p 1508 -s 480
        2⤵
        • Program crash
        PID:3424
    • C:\Windows\system32\WerFault.exe
      C:\Windows\system32\WerFault.exe -pss -s 408 -p 1508 -ip 1508
      1⤵
        PID:2056

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/1508-134-0x00007FFD0E5B0000-0x00007FFD0E7A5000-memory.dmp

        Filesize

        2.0MB

        Download

      • memory/1508-133-0x00007FFCCE630000-0x00007FFCCE640000-memory.dmp

        Filesize

        64KB

        Download

      • memory/1508-135-0x00007FFD0E5B0000-0x00007FFD0E7A5000-memory.dmp

        Filesize

        2.0MB

        Download

      • memory/1508-136-0x00007FFD0C030000-0x00007FFD0C2F9000-memory.dmp

        Filesize

        2.8MB

        Download

      • memory/1508-137-0x00007FFCCE630000-0x00007FFCCE640000-memory.dmp

        Filesize

        64KB

        Download

      • memory/1508-138-0x00007FFD0E5B0000-0x00007FFD0E7A5000-memory.dmp

        Filesize

        2.0MB

        Download