98c3e3880e19903d9be5246c6289c2fc4da140f6873e3afc9fd31d7541ba4d0f

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

Static

static

FARRMS/trm...ty.dll

windows7-x64

FARRMS/trm...ty.dll

windows10-2004-x64

FARRMS/trm...ml.dll

windows7-x64

FARRMS/trm...ml.dll

windows10-2004-x64

FARRMS/trm...LR.dll

windows7-x64

FARRMS/trm...LR.dll

windows10-2004-x64

FARRMS/trm...ip.dll

windows7-x64

FARRMS/trm...ip.dll

windows10-2004-x64

FARRMS/trm...nt.dll

windows7-x64

FARRMS/trm...nt.dll

windows10-2004-x64

FARRMS/trm...rd.dll

windows7-x64

FARRMS/trm...rd.dll

windows10-2004-x64

FARRMS/trm...ic.dll

windows7-x64

FARRMS/trm...ic.dll

windows10-2004-x64

FARRMS/trm...ml.dll

windows7-x64

FARRMS/trm...ml.dll

windows10-2004-x64

FARRMS/trm...ry.dll

windows7-x64

FARRMS/trm...ry.dll

windows10-2004-x64

FARRMS\\Ge...ter.js

windows7-x64

FARRMS\\Ge...ter.js

windows10-2004-x64

TRMTracker...6.html

windows7-x64

TRMTracker...6.html

windows10-2004-x64

Analysis

max time kernel
134s
max time network
166s
platform
windows10-2004_x64
resource
win10v2004-20230915-en
resource tags

arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
submitted
12/10/2023, 15:42

Sharing

Copy URL

Twitter E-mail

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

FARRMS/trm/adiha.php.scripts/dev/shared_docs/CLR_deploy\Accessibility.dll

Resource

win7-20230831-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

FARRMS/trm/adiha.php.scripts/dev/shared_docs/CLR_deploy\Accessibility.dll

Resource

win10v2004-20230915-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

FARRMS/trm/adiha.php.scripts/dev/shared_docs/CLR_deploy\DocumentFormat.OpenXml.dll

Resource

win7-20230831-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

FARRMS/trm/adiha.php.scripts/dev/shared_docs/CLR_deploy\DocumentFormat.OpenXml.dll

Resource

win10v2004-20230915-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

FARRMS/trm/adiha.php.scripts/dev/shared_docs/CLR_deploy\FARRMSGenericCLR.dll

Resource

win7-20230831-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

FARRMS/trm/adiha.php.scripts/dev/shared_docs/CLR_deploy\FARRMSGenericCLR.dll

Resource

win10v2004-20230915-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

FARRMS/trm/adiha.php.scripts/dev/shared_docs/CLR_deploy\Ionic.Zip.dll

Resource

win7-20230831-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

FARRMS/trm/adiha.php.scripts/dev/shared_docs/CLR_deploy\Ionic.Zip.dll

Resource

win10v2004-20230915-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

FARRMS/trm/adiha.php.scripts/dev/shared_docs/CLR_deploy\Jint.dll

Resource

win7-20230831-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

FARRMS/trm/adiha.php.scripts/dev/shared_docs/CLR_deploy\Jint.dll

Resource

win10v2004-20230915-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

FARRMS/trm/adiha.php.scripts/dev/shared_docs/CLR_deploy\Microsoft.Office.Interop.Word.dll

Resource

win7-20230831-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

FARRMS/trm/adiha.php.scripts/dev/shared_docs/CLR_deploy\Microsoft.Office.Interop.Word.dll

Resource

win10v2004-20230915-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

FARRMS/trm/adiha.php.scripts/dev/shared_docs/CLR_deploy\Microsoft.VisualBasic.dll

Resource

win7-20230831-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

FARRMS/trm/adiha.php.scripts/dev/shared_docs/CLR_deploy\Microsoft.VisualBasic.dll

Resource

win10v2004-20230915-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

FARRMS/trm/adiha.php.scripts/dev/shared_docs/CLR_deploy\System.Xaml.dll

Resource

win7-20230831-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

FARRMS/trm/adiha.php.scripts/dev/shared_docs/CLR_deploy\System.Xaml.dll

Resource

win10v2004-20230915-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

FARRMS/trm/adiha.php.scripts/dev/shared_docs/CLR_deploy\WordDocumentGenerator.Library.dll

Resource

win7-20230831-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

FARRMS/trm/adiha.php.scripts/dev/shared_docs/CLR_deploy\WordDocumentGenerator.Library.dll

Resource

win10v2004-20230915-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

FARRMS\\GenericCLR\FARRMSGenericCLR\IcePriceImporter.js

Resource

win7-20230831-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

FARRMS\\GenericCLR\FARRMSGenericCLR\IcePriceImporter.js

Resource

win10v2004-20230915-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

TRMTracker_Antero_Patch_contains_manual_steps_20230916.html

Resource

win7-20230831-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral22

Sample

TRMTracker_Antero_Patch_contains_manual_steps_20230916.html

Resource

win10v2004-20230915-en

windows10-2004-x64

5 signatures

150 seconds

Report Analysis Logs

General

Target

FARRMS/trm/adiha.php.scripts/dev/shared_docs/CLR_deploy\FARRMSGenericCLR.dll
Size

373KB
MD5

8889480fddd0ee0574c8dc490184706a
SHA1

f4b7e821b640d140707ae28605e0beec0a93bdb4
SHA256

77dd61983edc3294eebc062d683247fea4f0cc018a8630a011f40da8633ec864
SHA512

41612376dba512090ce9dde3ac0c2a79f70e6e3390fdd8267a36231afd1c06a0110e2f37e3caabb7a2c5631c0db8120cd984b2e264e91ce0b73bc5a110f01ac8
SSDEEP

3072:q6ECY8BvRS45L7qccpdiNodXTrWBqrBwshbriCR+s3/JdAvqHk5VyOkaGj7sBvGc:qHCYSpS4gKskwza6wBvy1VAC

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\FARRMS\trm\adiha.php.scripts\dev\shared_docs\CLR_deploy\FARRMSGenericCLR.dll,#1
1⤵
PID:3224

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads