Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
10Static
static
10net6.0-win...hy.dll
windows7-x64
1net6.0-win...hy.dll
windows10-2004-x64
1net6.0-win...ET.dll
windows7-x64
1net6.0-win...ET.dll
windows10-2004-x64
1net6.0-win...ib.dll
windows7-x64
1net6.0-win...ib.dll
windows10-2004-x64
1net6.0-win...rs.dll
windows7-x64
1net6.0-win...rs.dll
windows10-2004-x64
1net6.0-win...pf.dll
windows7-x64
1net6.0-win...pf.dll
windows10-2004-x64
1net6.0-win...cs.dll
windows7-x64
1net6.0-win...cs.dll
windows10-2004-x64
1net6.0-win...am.dll
windows7-x64
1net6.0-win...am.dll
windows10-2004-x64
1net6.0-win...rs.dll
windows7-x64
1net6.0-win...rs.dll
windows10-2004-x64
1net6.0-win...re.dll
windows7-x64
1net6.0-win...re.dll
windows10-2004-x64
1net6.0-win...ML.dll
windows7-x64
1net6.0-win...ML.dll
windows10-2004-x64
1net6.0-win...et.dll
windows7-x64
1net6.0-win...et.dll
windows10-2004-x64
1net6.0-win...ts.dll
windows7-x64
1net6.0-win...ts.dll
windows10-2004-x64
1net6.0-win...it.exe
windows7-x64
1net6.0-win...it.exe
windows10-2004-x64
1net6.0-win...it.exe
windows7-x64
1net6.0-win...it.exe
windows10-2004-x64
7net6.0-win...et.dll
windows7-x64
1net6.0-win...et.dll
windows10-2004-x64
1net6.0-win...ts.dll
windows7-x64
1net6.0-win...ts.dll
windows10-2004-x64
1Analysis
-
max time kernel
124s -
max time network
51s -
platform
windows10-2004_x64 -
resource
win10v2004-20231130-en -
resource tags
arch:x64arch:x86image:win10v2004-20231130-enlocale:en-usos:windows10-2004-x64system -
submitted
04/12/2023, 16:55
Behavioral task
behavioral1
Sample
net6.0-windows/BouncyCastle.Cryptography.dll
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
net6.0-windows/BouncyCastle.Cryptography.dll
Resource
win10v2004-20231127-en
Behavioral task
behavioral3
Sample
net6.0-windows/Enums.NET.dll
Resource
win7-20231129-en
Behavioral task
behavioral4
Sample
net6.0-windows/Enums.NET.dll
Resource
win10v2004-20231127-en
Behavioral task
behavioral5
Sample
net6.0-windows/ICSharpCode.SharpZipLib.dll
Resource
win7-20231020-en
Behavioral task
behavioral6
Sample
net6.0-windows/ICSharpCode.SharpZipLib.dll
Resource
win10v2004-20231127-en
Behavioral task
behavioral7
Sample
net6.0-windows/MaterialDesignColors.dll
Resource
win7-20231020-en
Behavioral task
behavioral8
Sample
net6.0-windows/MaterialDesignColors.dll
Resource
win10v2004-20231201-en
Behavioral task
behavioral9
Sample
net6.0-windows/MaterialDesignThemes.Wpf.dll
Resource
win7-20231025-en
Behavioral task
behavioral10
Sample
net6.0-windows/MaterialDesignThemes.Wpf.dll
Resource
win10v2004-20231130-en
Behavioral task
behavioral11
Sample
net6.0-windows/MathNet.Numerics.dll
Resource
win7-20231023-en
Behavioral task
behavioral12
Sample
net6.0-windows/MathNet.Numerics.dll
Resource
win10v2004-20231127-en
Behavioral task
behavioral13
Sample
net6.0-windows/Microsoft.IO.RecyclableMemoryStream.dll
Resource
win7-20231130-en
Behavioral task
behavioral14
Sample
net6.0-windows/Microsoft.IO.RecyclableMemoryStream.dll
Resource
win10v2004-20231130-en
Behavioral task
behavioral15
Sample
net6.0-windows/Microsoft.Xaml.Behaviors.dll
Resource
win7-20231129-en
Behavioral task
behavioral16
Sample
net6.0-windows/Microsoft.Xaml.Behaviors.dll
Resource
win10v2004-20231130-en
Behavioral task
behavioral17
Sample
net6.0-windows/NPOI.Core.dll
Resource
win7-20231130-en
Behavioral task
behavioral18
Sample
net6.0-windows/NPOI.Core.dll
Resource
win10v2004-20231201-en
Behavioral task
behavioral19
Sample
net6.0-windows/NPOI.OOXML.dll
Resource
win7-20231023-en
Behavioral task
behavioral20
Sample
net6.0-windows/NPOI.OOXML.dll
Resource
win10v2004-20231127-en
Behavioral task
behavioral21
Sample
net6.0-windows/NPOI.OpenXml4Net.dll
Resource
win7-20231020-en
Behavioral task
behavioral22
Sample
net6.0-windows/NPOI.OpenXml4Net.dll
Resource
win10v2004-20231127-en
Behavioral task
behavioral23
Sample
net6.0-windows/NPOI.OpenXmlFormats.dll
Resource
win7-20231020-en
Behavioral task
behavioral24
Sample
net6.0-windows/NPOI.OpenXmlFormats.dll
Resource
win10v2004-20231127-en
Behavioral task
behavioral25
Sample
net6.0-windows/RegisterVisit.exe
Resource
win7-20231129-en
Behavioral task
behavioral26
Sample
net6.0-windows/RegisterVisit.exe
Resource
win10v2004-20231130-en
Behavioral task
behavioral27
Sample
net6.0-windows/RegisterVisit.exe
Resource
win7-20231201-en
Behavioral task
behavioral28
Sample
net6.0-windows/RegisterVisit.exe
Resource
win10v2004-20231130-en
Behavioral task
behavioral29
Sample
net6.0-windows/S7.Net.dll
Resource
win7-20231201-en
Behavioral task
behavioral30
Sample
net6.0-windows/S7.Net.dll
Resource
win10v2004-20231127-en
Behavioral task
behavioral31
Sample
net6.0-windows/SixLabors.Fonts.dll
Resource
win7-20231130-en
Behavioral task
behavioral32
Sample
net6.0-windows/SixLabors.Fonts.dll
Resource
win10v2004-20231127-en
General
-
Target
net6.0-windows/RegisterVisit.exe
-
Size
161KB
-
MD5
d1142ca89cd0111051e3811471bdac06
-
SHA1
cfc4182f00fde88187dd27947c8b2d58940740af
-
SHA256
a807db4694ad7cc6a83f59be166c2ea427c3550cfac84bf3209b591a5fa3c51e
-
SHA512
3276ebb0a449cfe582d81748fb2a6540f9c0706896526f9141dacffb612a35e0bb188fdf95a844bfdf9e755d2cd3e7c34ca2302333e5c942259e1b69a019edc2
-
SSDEEP
3072:9xyjMffJq5h4uMXTfSP89fA0J9W7clSztMq:98l4uMXTf0MU7c8ztM
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 1 IoCs
Looks up country code configured in the registry, likely geofence.
description ioc Process Key value queried \REGISTRY\USER\S-1-5-21-596315103-1488671723-776734015-1000\Control Panel\International\Geo\Nation RegisterVisit.exe