98c3e3880e19903d9be5246c6289c2fc4da140f6873e3afc9fd31d7541ba4d0f

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

Static

static

FARRMS/trm...ty.dll

windows7-x64

FARRMS/trm...ty.dll

windows10-2004-x64

FARRMS/trm...ml.dll

windows7-x64

FARRMS/trm...ml.dll

windows10-2004-x64

FARRMS/trm...LR.dll

windows7-x64

FARRMS/trm...LR.dll

windows10-2004-x64

FARRMS/trm...ip.dll

windows7-x64

FARRMS/trm...ip.dll

windows10-2004-x64

FARRMS/trm...nt.dll

windows7-x64

FARRMS/trm...nt.dll

windows10-2004-x64

FARRMS/trm...rd.dll

windows7-x64

FARRMS/trm...rd.dll

windows10-2004-x64

FARRMS/trm...ic.dll

windows7-x64

FARRMS/trm...ic.dll

windows10-2004-x64

FARRMS/trm...ml.dll

windows7-x64

FARRMS/trm...ml.dll

windows10-2004-x64

FARRMS/trm...ry.dll

windows7-x64

FARRMS/trm...ry.dll

windows10-2004-x64

FARRMS\\Ge...ter.js

windows7-x64

FARRMS\\Ge...ter.js

windows10-2004-x64

TRMTracker...6.html

windows7-x64

TRMTracker...6.html

windows10-2004-x64

Analysis

max time kernel
122s
max time network
128s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
12/10/2023, 15:42

Sharing

Copy URL

Twitter E-mail

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

FARRMS/trm/adiha.php.scripts/dev/shared_docs/CLR_deploy\Accessibility.dll

Resource

win7-20230831-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

FARRMS/trm/adiha.php.scripts/dev/shared_docs/CLR_deploy\Accessibility.dll

Resource

win10v2004-20230915-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

FARRMS/trm/adiha.php.scripts/dev/shared_docs/CLR_deploy\DocumentFormat.OpenXml.dll

Resource

win7-20230831-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

FARRMS/trm/adiha.php.scripts/dev/shared_docs/CLR_deploy\DocumentFormat.OpenXml.dll

Resource

win10v2004-20230915-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

FARRMS/trm/adiha.php.scripts/dev/shared_docs/CLR_deploy\FARRMSGenericCLR.dll

Resource

win7-20230831-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

FARRMS/trm/adiha.php.scripts/dev/shared_docs/CLR_deploy\FARRMSGenericCLR.dll

Resource

win10v2004-20230915-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

FARRMS/trm/adiha.php.scripts/dev/shared_docs/CLR_deploy\Ionic.Zip.dll

Resource

win7-20230831-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

FARRMS/trm/adiha.php.scripts/dev/shared_docs/CLR_deploy\Ionic.Zip.dll

Resource

win10v2004-20230915-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

FARRMS/trm/adiha.php.scripts/dev/shared_docs/CLR_deploy\Jint.dll

Resource

win7-20230831-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

FARRMS/trm/adiha.php.scripts/dev/shared_docs/CLR_deploy\Jint.dll

Resource

win10v2004-20230915-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

FARRMS/trm/adiha.php.scripts/dev/shared_docs/CLR_deploy\Microsoft.Office.Interop.Word.dll

Resource

win7-20230831-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

FARRMS/trm/adiha.php.scripts/dev/shared_docs/CLR_deploy\Microsoft.Office.Interop.Word.dll

Resource

win10v2004-20230915-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

FARRMS/trm/adiha.php.scripts/dev/shared_docs/CLR_deploy\Microsoft.VisualBasic.dll

Resource

win7-20230831-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

FARRMS/trm/adiha.php.scripts/dev/shared_docs/CLR_deploy\Microsoft.VisualBasic.dll

Resource

win10v2004-20230915-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

FARRMS/trm/adiha.php.scripts/dev/shared_docs/CLR_deploy\System.Xaml.dll

Resource

win7-20230831-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

FARRMS/trm/adiha.php.scripts/dev/shared_docs/CLR_deploy\System.Xaml.dll

Resource

win10v2004-20230915-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

FARRMS/trm/adiha.php.scripts/dev/shared_docs/CLR_deploy\WordDocumentGenerator.Library.dll

Resource

win7-20230831-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

FARRMS/trm/adiha.php.scripts/dev/shared_docs/CLR_deploy\WordDocumentGenerator.Library.dll

Resource

win10v2004-20230915-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

FARRMS\\GenericCLR\FARRMSGenericCLR\IcePriceImporter.js

Resource

win7-20230831-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

FARRMS\\GenericCLR\FARRMSGenericCLR\IcePriceImporter.js

Resource

win10v2004-20230915-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

TRMTracker_Antero_Patch_contains_manual_steps_20230916.html

Resource

win7-20230831-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral22

Sample

TRMTracker_Antero_Patch_contains_manual_steps_20230916.html

Resource

win10v2004-20230915-en

windows10-2004-x64

5 signatures

150 seconds

Report Analysis Logs

General

Target

FARRMS/trm/adiha.php.scripts/dev/shared_docs/CLR_deploy\Ionic.Zip.dll
Size

451KB
MD5

6ded8fcbf5f1d9e422b327ca51625e24
SHA1

8a1140cebc39f6994eef7e8de4627fb7b72a2dd9
SHA256

3b3e541682e48f3fd2872f85a06278da2f3e7877ee956da89b90d732a1eaa0bd
SHA512

bda3a65133b7b1e2765c7d07c7da5103292b3c4c2f0673640428b3e7e8637b11539f06c330ab5d0ba6e2274bd2dcd2c50312be6579e75c4008ff5ae7dae34ce4
SSDEEP

6144:leSYvQAd10GtSV41OJDsTDDVUMle6ZjxLV/rHo0Oaaz2R9IY:oJBdBS4msNUCe65frHMnz2R9

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\FARRMS\trm\adiha.php.scripts\dev\shared_docs\CLR_deploy\Ionic.Zip.dll,#1
1⤵
PID:2552

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads