Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
10Static
static
10a.zip
windows7-x64
1a.zip
windows10-2004-x64
1tf2hud-edi...r3.dll
windows10-2004-x64
1tf2hud-edi...s.json
windows7-x64
3tf2hud-edi...s.json
windows10-2004-x64
3tf2hud-edi...d.json
windows7-x64
3tf2hud-edi...d.json
windows10-2004-x64
3tf2hud-edi...d.json
windows7-x64
3tf2hud-edi...d.json
windows10-2004-x64
3tf2hud-edi...d.json
windows7-x64
3tf2hud-edi...d.json
windows10-2004-x64
3tf2hud-edi...d.json
windows7-x64
3tf2hud-edi...d.json
windows10-2004-x64
3tf2hud-edi...d.json
windows7-x64
3tf2hud-edi...d.json
windows10-2004-x64
3tf2hud-edi...s.json
windows7-x64
3tf2hud-edi...s.json
windows10-2004-x64
3tf2hud-edi...d.json
windows7-x64
3tf2hud-edi...d.json
windows10-2004-x64
3tf2hud-edi...d.json
windows7-x64
3tf2hud-edi...d.json
windows10-2004-x64
3tf2hud-edi...d.json
windows7-x64
3tf2hud-edi...d.json
windows10-2004-x64
3tf2hud-edi...d.json
windows7-x64
3tf2hud-edi...d.json
windows10-2004-x64
3tf2hud-edi...d.json
windows7-x64
3tf2hud-edi...d.json
windows10-2004-x64
3tf2hud-edi...d.json
windows7-x64
3tf2hud-edi...d.json
windows10-2004-x64
3tf2hud-edi...r3.dll
windows7-x64
1tf2hud-edi...r3.dll
windows10-2004-x64
1tf2hud-edi...r3.dll
windows7-x64
1Analysis
-
max time kernel
150s -
max time network
161s -
platform
windows10-2004_x64 -
resource
win10v2004-20231127-en -
resource tags
arch:x64arch:x86image:win10v2004-20231127-enlocale:en-usos:windows10-2004-x64system -
submitted
04/12/2023, 18:20
Behavioral task
behavioral1
Sample
a.zip
Resource
win7-20231130-en
Behavioral task
behavioral2
Sample
a.zip
Resource
win10v2004-20231201-en
Behavioral task
behavioral3
Sample
tf2hud-editor/D3DCompiler_47_cor3.dll
Resource
win10v2004-20231127-en
Behavioral task
behavioral4
Sample
tf2hud-editor/JSON/Shared/controls.json
Resource
win7-20231023-en
Behavioral task
behavioral5
Sample
tf2hud-editor/JSON/Shared/controls.json
Resource
win10v2004-20231127-en
Behavioral task
behavioral6
Sample
tf2hud-editor/JSON/Shared/shared.json
Resource
win7-20231023-en
Behavioral task
behavioral7
Sample
tf2hud-editor/JSON/Shared/shared.json
Resource
win10v2004-20231127-en
Behavioral task
behavioral8
Sample
tf2hud-editor/JSON/berryhud.json
Resource
win7-20231020-en
Behavioral task
behavioral9
Sample
tf2hud-editor/JSON/berryhud.json
Resource
win10v2004-20231130-en
Behavioral task
behavioral10
Sample
tf2hud-editor/JSON/budhud.json
Resource
win7-20231201-en
Behavioral task
behavioral11
Sample
tf2hud-editor/JSON/budhud.json
Resource
win10v2004-20231130-en
Behavioral task
behavioral12
Sample
tf2hud-editor/JSON/flawhud.json
Resource
win7-20231130-en
Behavioral task
behavioral13
Sample
tf2hud-editor/JSON/flawhud.json
Resource
win10v2004-20231130-en
Behavioral task
behavioral14
Sample
tf2hud-editor/JSON/hexhud.json
Resource
win7-20231201-en
Behavioral task
behavioral15
Sample
tf2hud-editor/JSON/hexhud.json
Resource
win10v2004-20231127-en
Behavioral task
behavioral16
Sample
tf2hud-editor/JSON/hud-fixes.json
Resource
win7-20231023-en
Behavioral task
behavioral17
Sample
tf2hud-editor/JSON/hud-fixes.json
Resource
win10v2004-20231127-en
Behavioral task
behavioral18
Sample
tf2hud-editor/JSON/hypnotize-hud.json
Resource
win7-20231129-en
Behavioral task
behavioral19
Sample
tf2hud-editor/JSON/hypnotize-hud.json
Resource
win10v2004-20231130-en
Behavioral task
behavioral20
Sample
tf2hud-editor/JSON/kbnhud.json
Resource
win7-20231023-en
Behavioral task
behavioral21
Sample
tf2hud-editor/JSON/kbnhud.json
Resource
win10v2004-20231130-en
Behavioral task
behavioral22
Sample
tf2hud-editor/JSON/m0rehud.json
Resource
win7-20231020-en
Behavioral task
behavioral23
Sample
tf2hud-editor/JSON/m0rehud.json
Resource
win10v2004-20231201-en
Behavioral task
behavioral24
Sample
tf2hud-editor/JSON/rayshud.json
Resource
win7-20231020-en
Behavioral task
behavioral25
Sample
tf2hud-editor/JSON/rayshud.json
Resource
win10v2004-20231127-en
Behavioral task
behavioral26
Sample
tf2hud-editor/JSON/sunsethud.json
Resource
win7-20231023-en
Behavioral task
behavioral27
Sample
tf2hud-editor/JSON/sunsethud.json
Resource
win10v2004-20231130-en
Behavioral task
behavioral28
Sample
tf2hud-editor/JSON/zeeshud.json
Resource
win7-20231130-en
Behavioral task
behavioral29
Sample
tf2hud-editor/JSON/zeeshud.json
Resource
win10v2004-20231127-en
Behavioral task
behavioral30
Sample
tf2hud-editor/PenImc_cor3.dll
Resource
win7-20231023-en
Behavioral task
behavioral31
Sample
tf2hud-editor/PenImc_cor3.dll
Resource
win10v2004-20231130-en
Behavioral task
behavioral32
Sample
tf2hud-editor/PresentationNative_cor3.dll
Resource
win7-20231129-en
General
-
Target
tf2hud-editor/JSON/zeeshud.json
-
Size
25KB
-
MD5
fee9d7a4d9b75443216b60364cd84406
-
SHA1
2e0307b2b4145afe5c44b933143539cf5b134de4
-
SHA256
36431a03caf416f71b4a2b7c6d09a08c44647afe4aec646a2796ba06e62e89d0
-
SHA512
afa95945aafd196f8295fc57be95f5f8451e851ad1e3dbb02090e8bfdc4dd7b4e1b24ee44703c2ada3d9879eef13847ce03a99528cb57f30d0af575d8255fa2e
-
SSDEEP
192:WiJYs1dFlorULYhu80Me0z0VN0w0+M0Q0/E0x0x60J0hF0G0Ad000aP09z0Sts0A:31FPkP87aAhBqjnpnrNuLN
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-3635043082-2972811465-3176142135-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-3635043082-2972811465-3176142135-1000_Classes\Local Settings OpenWith.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1864 OpenWith.exe