Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

3

JOYSTICK/X...ME.txt

windows7-x64

1

JOYSTICK/X...ME.txt

windows10-2004-x64

1

JOYSTICK/X...PI.dll

windows7-x64

1

JOYSTICK/X...PI.dll

windows10-2004-x64

1

JOYSTICK/X...PI.dll

windows7-x64

1

JOYSTICK/X...PI.dll

windows10-2004-x64

1

JOYSTICK/X...er.exe

windows7-x64

1

JOYSTICK/X...er.exe

windows10-2004-x64

1

JOYSTICK/X...er.log

windows7-x64

1

JOYSTICK/X...er.log

windows10-2004-x64

1

JOYSTICK/X...us.cat

windows7-x64

8

JOYSTICK/X...us.cat

windows10-2004-x64

8

JOYSTICK/X...us.inf

windows7-x64

1

JOYSTICK/X...us.inf

windows10-2004-x64

1

JOYSTICK/X...us.exe

windows7-x64

JOYSTICK/X...us.exe

windows10-2004-x64

JOYSTICK/X...us.exe

windows7-x64

JOYSTICK/X...us.exe

windows10-2004-x64

JOYSTICK/X...DX.dll

windows7-x64

1

JOYSTICK/X...DX.dll

windows10-2004-x64

1

JOYSTICK/X...ut.exe

windows7-x64

1

JOYSTICK/X...ut.exe

windows10-2004-x64

1

JOYSTICK/desktop.ini

windows7-x64

1

JOYSTICK/desktop.ini

windows10-2004-x64

1

JOYSTICK/x...ce.exe

windows7-x64

7

JOYSTICK/x...ce.exe

windows10-2004-x64

1

JOYSTICK/x...64.exe

windows7-x64

7

JOYSTICK/x...64.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    83s
  • max time network
    130s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23/08/2023, 22:07

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    JOYSTICK/XOutput.v0.11/ScpDriver/System/ScpVBus.cat

  • Size

    12KB

  • MD5

    7492d3a14295cf07247072bc6dfa18d8

  • SHA1

    5b51ea5beec952dfc540f16a391bf13e51af5c76

  • SHA256

    b2f1e2641c9c329c5b28a366952d78fa30243efa8805d1ed8d8909b55024e5ff

  • SHA512

    2fb9dbb8520e0c41b120e2acb85b32c322aba2a3e366c7a46bfdd7389e1f0793e07696dcdde335ff0b2dbe532a1bcd8592053dc31e13f6f5096df29381aeca24

  • SSDEEP

    192:eAIhUb2EOwXMFmIrmu+RTBb6eIpUMhl/lreMIILN6Uh7EsM8II+9iGEfgUv5ImD7:Gwqrn2KPYSPLjYdtRHg

Score
8/10

Malware Config

Signatures

  • Blocklisted process makes network request 5 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    C:\Windows\system32\rundll32.exe cryptext.dll,CryptExtOpenCAT C:\Users\Admin\AppData\Local\Temp\JOYSTICK\XOutput.v0.11\ScpDriver\System\ScpVBus.cat
    1⤵
    • Blocklisted process makes network request
    PID:1656

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads