bd3bcd0bd245b41f8237bea5382f27dd6f699f5827a87ff559311c014a97b41b

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

Static

static

Construct ...on.exe

windows7-x64

Construct ...on.exe

windows10-2004-x64

Construct ...er.dll

windows7-x64

Construct ...er.dll

windows10-2004-x64

Construct ...mon.js

windows7-x64

Construct ...mon.js

windows10-2004-x64

Construct ...ime.js

windows7-x64

Construct ...ime.js

windows10-2004-x64

Construct ...ime.js

windows7-x64

Construct ...ime.js

windows10-2004-x64

Construct ...mon.js

windows7-x64

Construct ...mon.js

windows10-2004-x64

Construct ...ime.js

windows7-x64

Construct ...ime.js

windows10-2004-x64

Construct ...ime.js

windows7-x64

Construct ...ime.js

windows10-2004-x64

Construct ...mon.js

windows7-x64

Construct ...mon.js

windows10-2004-x64

Construct ...ime.js

windows7-x64

Construct ...ime.js

windows10-2004-x64

Construct ...ime.js

windows7-x64

Construct ...ime.js

windows10-2004-x64

Construct ...mon.js

windows7-x64

Construct ...mon.js

windows10-2004-x64

Construct ...ime.js

windows7-x64

Construct ...ime.js

windows10-2004-x64

Construct ...ime.js

windows7-x64

Construct ...ime.js

windows10-2004-x64

Construct ...mon.js

windows7-x64

Construct ...mon.js

windows10-2004-x64

Construct ...ime.js

windows7-x64

Construct ...ime.js

windows10-2004-x64

Analysis

max time kernel
96s
max time network
198s
platform
windows10-2004_x64
resource
win10v2004-20231025-en
resource tags

arch:x64arch:x86image:win10v2004-20231025-enlocale:en-usos:windows10-2004-x64system
submitted
16/11/2023, 22:10

Sharing

Copy URL

Twitter E-mail

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

Construct 2 - Overdrive Edition (Arquives)/Construct 2 - Overdrive Edition.exe

Resource

win7-20231023-en

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral2

Sample

Construct 2 - Overdrive Edition (Arquives)/Construct 2 - Overdrive Edition.exe

Resource

win10v2004-20231023-en

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral3

Sample

Construct 2 - Overdrive Edition (Arquives)/SciLexer.dll

Resource

win7-20231025-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

Construct 2 - Overdrive Edition (Arquives)/SciLexer.dll

Resource

win10v2004-20231025-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

Construct 2 - Overdrive Edition (Arquives)/exporters/html5/behaviors/8direction/common.js

Resource

win7-20231023-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

Construct 2 - Overdrive Edition (Arquives)/exporters/html5/behaviors/8direction/common.js

Resource

win10v2004-20231020-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

Construct 2 - Overdrive Edition (Arquives)/exporters/html5/behaviors/8direction/edittime.js

Resource

win7-20231020-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

Construct 2 - Overdrive Edition (Arquives)/exporters/html5/behaviors/8direction/edittime.js

Resource

win10v2004-20231020-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

Construct 2 - Overdrive Edition (Arquives)/exporters/html5/behaviors/8direction/runtime.js

Resource

win7-20231023-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

Construct 2 - Overdrive Edition (Arquives)/exporters/html5/behaviors/8direction/runtime.js

Resource

win10v2004-20231020-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

Construct 2 - Overdrive Edition (Arquives)/exporters/html5/behaviors/BHT_Bound_To_Layout_Plus_1.1/common.js

Resource

win7-20231020-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

Construct 2 - Overdrive Edition (Arquives)/exporters/html5/behaviors/BHT_Bound_To_Layout_Plus_1.1/common.js

Resource

win10v2004-20231020-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

Construct 2 - Overdrive Edition (Arquives)/exporters/html5/behaviors/BHT_Bound_To_Layout_Plus_1.1/edittime.js

Resource

win7-20231020-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

Construct 2 - Overdrive Edition (Arquives)/exporters/html5/behaviors/BHT_Bound_To_Layout_Plus_1.1/edittime.js

Resource

win10v2004-20231023-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

Construct 2 - Overdrive Edition (Arquives)/exporters/html5/behaviors/BHT_Bound_To_Layout_Plus_1.1/runtime.js

Resource

win7-20231023-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

Construct 2 - Overdrive Edition (Arquives)/exporters/html5/behaviors/BHT_Bound_To_Layout_Plus_1.1/runtime.js

Resource

win10v2004-20231025-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

Construct 2 - Overdrive Edition (Arquives)/exporters/html5/behaviors/BHT_Scroll_To_Plus_1.3/common.js

Resource

win7-20231023-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

Construct 2 - Overdrive Edition (Arquives)/exporters/html5/behaviors/BHT_Scroll_To_Plus_1.3/common.js

Resource

win10v2004-20231023-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

Construct 2 - Overdrive Edition (Arquives)/exporters/html5/behaviors/BHT_Scroll_To_Plus_1.3/edittime.js

Resource

win7-20231020-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

Construct 2 - Overdrive Edition (Arquives)/exporters/html5/behaviors/BHT_Scroll_To_Plus_1.3/edittime.js

Resource

win10v2004-20231023-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

Construct 2 - Overdrive Edition (Arquives)/exporters/html5/behaviors/BHT_Scroll_To_Plus_1.3/runtime.js

Resource

win7-20231023-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

Construct 2 - Overdrive Edition (Arquives)/exporters/html5/behaviors/BHT_Scroll_To_Plus_1.3/runtime.js

Resource

win10v2004-20231023-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

Construct 2 - Overdrive Edition (Arquives)/exporters/html5/behaviors/Brian_Jack_GauVeldt_Ease/common.js

Resource

win7-20231020-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

Construct 2 - Overdrive Edition (Arquives)/exporters/html5/behaviors/Brian_Jack_GauVeldt_Ease/common.js

Resource

win10v2004-20231023-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

Construct 2 - Overdrive Edition (Arquives)/exporters/html5/behaviors/Brian_Jack_GauVeldt_Ease/edittime.js

Resource

win7-20231023-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

Construct 2 - Overdrive Edition (Arquives)/exporters/html5/behaviors/Brian_Jack_GauVeldt_Ease/edittime.js

Resource

win10v2004-20231020-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

Construct 2 - Overdrive Edition (Arquives)/exporters/html5/behaviors/Brian_Jack_GauVeldt_Ease/runtime.js

Resource

win7-20231025-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

Construct 2 - Overdrive Edition (Arquives)/exporters/html5/behaviors/Brian_Jack_GauVeldt_Ease/runtime.js

Resource

win10v2004-20231023-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

Construct 2 - Overdrive Edition (Arquives)/exporters/html5/behaviors/Carlos_Campana_Hadouken-Imput/common.js

Resource

win7-20231020-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

Construct 2 - Overdrive Edition (Arquives)/exporters/html5/behaviors/Carlos_Campana_Hadouken-Imput/common.js

Resource

win10v2004-20231020-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

Construct 2 - Overdrive Edition (Arquives)/exporters/html5/behaviors/Carlos_Campana_Hadouken-Imput/edittime.js

Resource

win7-20231023-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

Construct 2 - Overdrive Edition (Arquives)/exporters/html5/behaviors/Carlos_Campana_Hadouken-Imput/edittime.js

Resource

win10v2004-20231020-en

windows10-2004-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

Construct 2 - Overdrive Edition (Arquives)/SciLexer.dll
Size

1.1MB
MD5

6205933d876c9e208cfa9ce0a7ac8588
SHA1

5503774b1db73047bfcf89f4546f95a0e4197339
SHA256

0490917af7ad9385ca5f11b530300188e34de11357d86b2830ce6b052fa3189b
SHA512

0f7824fe52fa8f093df5cf80a867f5cae9a70c25fff31c1833252685669177bf3060cf523cad634a3724fa5ef733e13ec00eada6420c069609234bdee200062a
SSDEEP

24576:mL68F44edfy9Hb0/bN7XRKi1NTlyqkNEXGsu:mFF44EgHb0Jjsi1N5kOGsu

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 2 IoCs

description	pid	Process	procid_target
PID 3280 wrote to memory of 972	3280	rundll32.exe	96
PID 3280 wrote to memory of 972	3280	rundll32.exe	96

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\Construct 2 - Overdrive Edition (Arquives)\SciLexer.dll",#1
1⤵
- Suspicious use of WriteProcessMemory
PID:3280
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 3280 -s 344
  2⤵
  PID:972

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads