Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

FARRMS/trm...ty.dll

windows7-x64

1

FARRMS/trm...ty.dll

windows10-2004-x64

1

FARRMS/trm...ml.dll

windows7-x64

1

FARRMS/trm...ml.dll

windows10-2004-x64

1

FARRMS/trm...LR.dll

windows7-x64

1

FARRMS/trm...LR.dll

windows10-2004-x64

1

FARRMS/trm...ip.dll

windows7-x64

1

FARRMS/trm...ip.dll

windows10-2004-x64

1

FARRMS/trm...nt.dll

windows7-x64

1

FARRMS/trm...nt.dll

windows10-2004-x64

1

FARRMS/trm...rd.dll

windows7-x64

1

FARRMS/trm...rd.dll

windows10-2004-x64

1

FARRMS/trm...ic.dll

windows7-x64

1

FARRMS/trm...ic.dll

windows10-2004-x64

1

FARRMS/trm...ml.dll

windows7-x64

1

FARRMS/trm...ml.dll

windows10-2004-x64

1

FARRMS/trm...ry.dll

windows7-x64

1

FARRMS/trm...ry.dll

windows10-2004-x64

1

FARRMS\\Ge...ter.js

windows7-x64

1

FARRMS\\Ge...ter.js

windows10-2004-x64

1

TRMTracker...6.html

windows7-x64

1

TRMTracker...6.html

windows10-2004-x64

1

Analysis

  • max time kernel
    145s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    12/10/2023, 15:42

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    FARRMS/trm/adiha.php.scripts/dev/shared_docs/CLR_deploy\Microsoft.Office.Interop.Word.dll

  • Size

    762KB

  • MD5

    31a69f32502de8b29ed98bfa19de1332

  • SHA1

    903f22a8b1416e4c00df321ecd66cf9fc20728a1

  • SHA256

    dae57a0a42312711f6125024b00aed2df224b62be509f749126d27357e05a230

  • SHA512

    31bb81fa09e5a9cb78c830ae149216ee8d20dd720e281775d7335d9854f8ef3d1597978b2e6b2d23a35ffda031f0eda89e1e4ed1c5a7c6723b84b19dd3657ad8

  • SSDEEP

    12288:xLHb+VwvK58jWNoXiRULuFg/6pmrS5YHWF8DqxwBiN0fm5o7KF8HORwDydEv2J45:xLHb+VwvK58jWNoXiRULuFg/6pmrS5YL

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\FARRMS\trm\adiha.php.scripts\dev\shared_docs\CLR_deploy\Microsoft.Office.Interop.Word.dll,#1
    1⤵
      PID:2164

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads