98c3e3880e19903d9be5246c6289c2fc4da140f6873e3afc9fd31d7541ba4d0f

Submit
Reports

Overview

overview

Static

static

FARRMS/trm...ty.dll

windows7-x64

FARRMS/trm...ty.dll

windows10-2004-x64

FARRMS/trm...ml.dll

windows7-x64

FARRMS/trm...ml.dll

windows10-2004-x64

FARRMS/trm...LR.dll

windows7-x64

FARRMS/trm...LR.dll

windows10-2004-x64

FARRMS/trm...ip.dll

windows7-x64

FARRMS/trm...ip.dll

windows10-2004-x64

FARRMS/trm...nt.dll

windows7-x64

FARRMS/trm...nt.dll

windows10-2004-x64

FARRMS/trm...rd.dll

windows7-x64

FARRMS/trm...rd.dll

windows10-2004-x64

FARRMS/trm...ic.dll

windows7-x64

FARRMS/trm...ic.dll

windows10-2004-x64

FARRMS/trm...ml.dll

windows7-x64

FARRMS/trm...ml.dll

windows10-2004-x64

FARRMS/trm...ry.dll

windows7-x64

FARRMS/trm...ry.dll

windows10-2004-x64

FARRMS\\Ge...ter.js

windows7-x64

FARRMS\\Ge...ter.js

windows10-2004-x64

TRMTracker...6.html

windows7-x64

TRMTracker...6.html

windows10-2004-x64

Analysis

max time kernel
118s
max time network
129s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
12-10-2023 15:42

Sharing

Copy URL

Twitter E-mail

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

FARRMS/trm/adiha.php.scripts/dev/shared_docs/CLR_deploy\Accessibility.dll

Resource

win7-20230831-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

FARRMS/trm/adiha.php.scripts/dev/shared_docs/CLR_deploy\Accessibility.dll

Resource

win10v2004-20230915-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

FARRMS/trm/adiha.php.scripts/dev/shared_docs/CLR_deploy\DocumentFormat.OpenXml.dll

Resource

win7-20230831-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

FARRMS/trm/adiha.php.scripts/dev/shared_docs/CLR_deploy\DocumentFormat.OpenXml.dll

Resource

win10v2004-20230915-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

FARRMS/trm/adiha.php.scripts/dev/shared_docs/CLR_deploy\FARRMSGenericCLR.dll

Resource

win7-20230831-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

FARRMS/trm/adiha.php.scripts/dev/shared_docs/CLR_deploy\FARRMSGenericCLR.dll

Resource

win10v2004-20230915-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

FARRMS/trm/adiha.php.scripts/dev/shared_docs/CLR_deploy\Ionic.Zip.dll

Resource

win7-20230831-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

FARRMS/trm/adiha.php.scripts/dev/shared_docs/CLR_deploy\Ionic.Zip.dll

Resource

win10v2004-20230915-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

FARRMS/trm/adiha.php.scripts/dev/shared_docs/CLR_deploy\Jint.dll

Resource

win7-20230831-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

FARRMS/trm/adiha.php.scripts/dev/shared_docs/CLR_deploy\Jint.dll

Resource

win10v2004-20230915-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

FARRMS/trm/adiha.php.scripts/dev/shared_docs/CLR_deploy\Microsoft.Office.Interop.Word.dll

Resource

win7-20230831-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

FARRMS/trm/adiha.php.scripts/dev/shared_docs/CLR_deploy\Microsoft.Office.Interop.Word.dll

Resource

win10v2004-20230915-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

FARRMS/trm/adiha.php.scripts/dev/shared_docs/CLR_deploy\Microsoft.VisualBasic.dll

Resource

win7-20230831-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

FARRMS/trm/adiha.php.scripts/dev/shared_docs/CLR_deploy\Microsoft.VisualBasic.dll

Resource

win10v2004-20230915-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

FARRMS/trm/adiha.php.scripts/dev/shared_docs/CLR_deploy\System.Xaml.dll

Resource

win7-20230831-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

FARRMS/trm/adiha.php.scripts/dev/shared_docs/CLR_deploy\System.Xaml.dll

Resource

win10v2004-20230915-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

FARRMS/trm/adiha.php.scripts/dev/shared_docs/CLR_deploy\WordDocumentGenerator.Library.dll

Resource

win7-20230831-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

FARRMS/trm/adiha.php.scripts/dev/shared_docs/CLR_deploy\WordDocumentGenerator.Library.dll

Resource

win10v2004-20230915-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

FARRMS\\GenericCLR\FARRMSGenericCLR\IcePriceImporter.js

Resource

win7-20230831-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

FARRMS\\GenericCLR\FARRMSGenericCLR\IcePriceImporter.js

Resource

win10v2004-20230915-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

TRMTracker_Antero_Patch_contains_manual_steps_20230916.html

Resource

win7-20230831-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral22

Sample

TRMTracker_Antero_Patch_contains_manual_steps_20230916.html

Resource

win10v2004-20230915-en

windows10-2004-x64

5 signatures

150 seconds

Report Analysis Logs

General

Target

FARRMS/trm/adiha.php.scripts/dev/shared_docs/CLR_deploy\System.Xaml.dll
Size

612KB
MD5

2bbc120287bc74b5af6e88fbc4e92de8
SHA1

4e2beb3e1d2f397c8c522c42a612ad02c340d848
SHA256

dbfd2e947e9f50e11fbc1ab967b53fb970fcfdf548c33e3871ad0d8d50b97a05
SHA512

eeed2216ec3fd75a42c5ce7d7891feeec9a6778b9bf31903cc7bd27868eb51732ca83e9d35b0bbec6d0e90ad06f5422f6f2f814ae514cac273e077f1932e51e1
SSDEEP

6144:JyVla2hZKmPqdLtVxVJQdgPq+IjUcmAL8EZVutOriy+msYpcYmwBCHbdQsy7Ffc0:JyTk9xVgjtmYZ8OrnsYpcYrBCdQ3Yc

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\FARRMS\trm\adiha.php.scripts\dev\shared_docs\CLR_deploy\System.Xaml.dll,#1
1⤵
PID:1680

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads