98c3e3880e19903d9be5246c6289c2fc4da140f6873e3afc9fd31d7541ba4d0f

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

Static

static

FARRMS/trm...ty.dll

windows7-x64

FARRMS/trm...ty.dll

windows10-2004-x64

FARRMS/trm...ml.dll

windows7-x64

FARRMS/trm...ml.dll

windows10-2004-x64

FARRMS/trm...LR.dll

windows7-x64

FARRMS/trm...LR.dll

windows10-2004-x64

FARRMS/trm...ip.dll

windows7-x64

FARRMS/trm...ip.dll

windows10-2004-x64

FARRMS/trm...nt.dll

windows7-x64

FARRMS/trm...nt.dll

windows10-2004-x64

FARRMS/trm...rd.dll

windows7-x64

FARRMS/trm...rd.dll

windows10-2004-x64

FARRMS/trm...ic.dll

windows7-x64

FARRMS/trm...ic.dll

windows10-2004-x64

FARRMS/trm...ml.dll

windows7-x64

FARRMS/trm...ml.dll

windows10-2004-x64

FARRMS/trm...ry.dll

windows7-x64

FARRMS/trm...ry.dll

windows10-2004-x64

FARRMS\\Ge...ter.js

windows7-x64

FARRMS\\Ge...ter.js

windows10-2004-x64

TRMTracker...6.html

windows7-x64

TRMTracker...6.html

windows10-2004-x64

Analysis

max time kernel
118s
max time network
131s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
12/10/2023, 15:42

Sharing

Copy URL

Twitter E-mail

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

FARRMS/trm/adiha.php.scripts/dev/shared_docs/CLR_deploy\Accessibility.dll

Resource

win7-20230831-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

FARRMS/trm/adiha.php.scripts/dev/shared_docs/CLR_deploy\Accessibility.dll

Resource

win10v2004-20230915-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

FARRMS/trm/adiha.php.scripts/dev/shared_docs/CLR_deploy\DocumentFormat.OpenXml.dll

Resource

win7-20230831-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

FARRMS/trm/adiha.php.scripts/dev/shared_docs/CLR_deploy\DocumentFormat.OpenXml.dll

Resource

win10v2004-20230915-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

FARRMS/trm/adiha.php.scripts/dev/shared_docs/CLR_deploy\FARRMSGenericCLR.dll

Resource

win7-20230831-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

FARRMS/trm/adiha.php.scripts/dev/shared_docs/CLR_deploy\FARRMSGenericCLR.dll

Resource

win10v2004-20230915-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

FARRMS/trm/adiha.php.scripts/dev/shared_docs/CLR_deploy\Ionic.Zip.dll

Resource

win7-20230831-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

FARRMS/trm/adiha.php.scripts/dev/shared_docs/CLR_deploy\Ionic.Zip.dll

Resource

win10v2004-20230915-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

FARRMS/trm/adiha.php.scripts/dev/shared_docs/CLR_deploy\Jint.dll

Resource

win7-20230831-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

FARRMS/trm/adiha.php.scripts/dev/shared_docs/CLR_deploy\Jint.dll

Resource

win10v2004-20230915-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

FARRMS/trm/adiha.php.scripts/dev/shared_docs/CLR_deploy\Microsoft.Office.Interop.Word.dll

Resource

win7-20230831-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

FARRMS/trm/adiha.php.scripts/dev/shared_docs/CLR_deploy\Microsoft.Office.Interop.Word.dll

Resource

win10v2004-20230915-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

FARRMS/trm/adiha.php.scripts/dev/shared_docs/CLR_deploy\Microsoft.VisualBasic.dll

Resource

win7-20230831-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

FARRMS/trm/adiha.php.scripts/dev/shared_docs/CLR_deploy\Microsoft.VisualBasic.dll

Resource

win10v2004-20230915-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

FARRMS/trm/adiha.php.scripts/dev/shared_docs/CLR_deploy\System.Xaml.dll

Resource

win7-20230831-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

FARRMS/trm/adiha.php.scripts/dev/shared_docs/CLR_deploy\System.Xaml.dll

Resource

win10v2004-20230915-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

FARRMS/trm/adiha.php.scripts/dev/shared_docs/CLR_deploy\WordDocumentGenerator.Library.dll

Resource

win7-20230831-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

FARRMS/trm/adiha.php.scripts/dev/shared_docs/CLR_deploy\WordDocumentGenerator.Library.dll

Resource

win10v2004-20230915-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

FARRMS\\GenericCLR\FARRMSGenericCLR\IcePriceImporter.js

Resource

win7-20230831-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

FARRMS\\GenericCLR\FARRMSGenericCLR\IcePriceImporter.js

Resource

win10v2004-20230915-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

TRMTracker_Antero_Patch_contains_manual_steps_20230916.html

Resource

win7-20230831-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral22

Sample

TRMTracker_Antero_Patch_contains_manual_steps_20230916.html

Resource

win10v2004-20230915-en

windows10-2004-x64

5 signatures

150 seconds

Report Analysis Logs

General

Target

FARRMS/trm/adiha.php.scripts/dev/shared_docs/CLR_deploy\Jint.dll
Size

531KB
MD5

2329b8a3bbad6c87f8463de5baf748f7
SHA1

d1155918cc9b1804ddc0c5ba2c0e734ab630f1e7
SHA256

d0eab5dda22bd9e6e41b2354cd8d90d12b66f38982260623b8be1b0a738c1005
SHA512

fe12d3c4bc625cf716e49c32aebc68b9adbdb167a137319a19534845c5d8b91f952475686dd7a2a5b9898b9f9c3defae1caa9286a18ff673d84cb3cc5b152119
SSDEEP

6144:ZoT5AD016559/R/ni0nxvVilNNveXlq8TitnwWAibUg8NCMeybLK:IGS6L9/BLlq8GIw8NC2K

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\FARRMS\trm\adiha.php.scripts\dev\shared_docs\CLR_deploy\Jint.dll,#1
1⤵
PID:2188

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads