Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
3Static
static
3r128gain-0...54.dll
windows7-x64
3r128gain-0...54.dll
windows10-2004-x64
3r128gain-0...53.dll
windows7-x64
1r128gain-0...53.dll
windows10-2004-x64
1r128gain-0...-2.dll
windows7-x64
1r128gain-0...-2.dll
windows10-2004-x64
1r128gain-0...54.dll
windows7-x64
3r128gain-0...54.dll
windows10-2004-x64
3r128gain-0...51.dll
windows7-x64
1r128gain-0...51.dll
windows10-2004-x64
1r128gain-0...x.html
windows7-x64
1r128gain-0...x.html
windows10-2004-x64
1r128gain-0...eg.exe
windows7-x64
1r128gain-0...eg.exe
windows10-2004-x64
1r128gain-0...in.dll
windows7-x64
1r128gain-0...in.dll
windows10-2004-x64
1r128gain-0...rl.dll
windows7-x64
1r128gain-0...rl.dll
windows10-2004-x64
1r128gain-0...ox.dll
windows7-x64
1r128gain-0...ox.dll
windows10-2004-x64
1r128gain-0...52.dll
windows7-x64
1r128gain-0...52.dll
windows10-2004-x64
1r128gain-0...ox.exe
windows7-x64
1r128gain-0...ox.exe
windows10-2004-x64
1r128gain-0...-0.dll
windows7-x64
1r128gain-0...-0.dll
windows10-2004-x64
1r128gain-0...-2.dll
windows7-x64
3r128gain-0...-2.dll
windows10-2004-x64
1r128gain-0...in.exe
windows7-x64
1r128gain-0...in.exe
windows10-2004-x64
1Analysis
-
max time kernel
120s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
26/12/2023, 12:16
Static task
static1
Behavioral task
behavioral1
Sample
r128gain-0.9.7-2/r128gain-tools/avcodec-54.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
r128gain-0.9.7-2/r128gain-tools/avcodec-54.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
r128gain-0.9.7-2/r128gain-tools/avdevice-53.dll
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
r128gain-0.9.7-2/r128gain-tools/avdevice-53.dll
Resource
win10v2004-20231222-en
Behavioral task
behavioral5
Sample
r128gain-0.9.7-2/r128gain-tools/avfilter-2.dll
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
r128gain-0.9.7-2/r128gain-tools/avfilter-2.dll
Resource
win10v2004-20231222-en
Behavioral task
behavioral7
Sample
r128gain-0.9.7-2/r128gain-tools/avformat-54.dll
Resource
win7-20231129-en
Behavioral task
behavioral8
Sample
r128gain-0.9.7-2/r128gain-tools/avformat-54.dll
Resource
win10v2004-20231222-en
Behavioral task
behavioral9
Sample
r128gain-0.9.7-2/r128gain-tools/avutil-51.dll
Resource
win7-20231215-en
Behavioral task
behavioral10
Sample
r128gain-0.9.7-2/r128gain-tools/avutil-51.dll
Resource
win10v2004-20231222-en
Behavioral task
behavioral11
Sample
r128gain-0.9.7-2/r128gain-tools/doc/index.html
Resource
win7-20231215-en
Behavioral task
behavioral12
Sample
r128gain-0.9.7-2/r128gain-tools/doc/index.html
Resource
win10v2004-20231222-en
Behavioral task
behavioral13
Sample
r128gain-0.9.7-2/r128gain-tools/ffmpeg.exe
Resource
win7-20231215-en
Behavioral task
behavioral14
Sample
r128gain-0.9.7-2/r128gain-tools/ffmpeg.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral15
Sample
r128gain-0.9.7-2/r128gain-tools/libreplaygain.dll
Resource
win7-20231215-en
Behavioral task
behavioral16
Sample
r128gain-0.9.7-2/r128gain-tools/libreplaygain.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral17
Sample
r128gain-0.9.7-2/r128gain-tools/libsetdlgitemurl.dll
Resource
win7-20231129-en
Behavioral task
behavioral18
Sample
r128gain-0.9.7-2/r128gain-tools/libsetdlgitemurl.dll
Resource
win10v2004-20231222-en
Behavioral task
behavioral19
Sample
r128gain-0.9.7-2/r128gain-tools/libsox.dll
Resource
win7-20231215-en
Behavioral task
behavioral20
Sample
r128gain-0.9.7-2/r128gain-tools/libsox.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral21
Sample
r128gain-0.9.7-2/r128gain-tools/postproc-52.dll
Resource
win7-20231215-en
Behavioral task
behavioral22
Sample
r128gain-0.9.7-2/r128gain-tools/postproc-52.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral23
Sample
r128gain-0.9.7-2/r128gain-tools/sox.exe
Resource
win7-20231215-en
Behavioral task
behavioral24
Sample
r128gain-0.9.7-2/r128gain-tools/sox.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral25
Sample
r128gain-0.9.7-2/r128gain-tools/swresample-0.dll
Resource
win7-20231215-en
Behavioral task
behavioral26
Sample
r128gain-0.9.7-2/r128gain-tools/swresample-0.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral27
Sample
r128gain-0.9.7-2/r128gain-tools/swscale-2.dll
Resource
win7-20231129-en
Behavioral task
behavioral28
Sample
r128gain-0.9.7-2/r128gain-tools/swscale-2.dll
Resource
win10v2004-20231222-en
Behavioral task
behavioral29
Sample
r128gain-0.9.7-2/r128gain.exe
Resource
win7-20231215-en
Behavioral task
behavioral30
Sample
r128gain-0.9.7-2/r128gain.exe
Resource
win10v2004-20231222-en
General
-
Target
r128gain-0.9.7-2/r128gain-tools/avfilter-2.dll
-
Size
456KB
-
MD5
ff27040b64f89be0b84a126cf0f7f29e
-
SHA1
7cc6f31767b07595d1eacd1c93435381c79a5ceb
-
SHA256
4a44e7ba917f35e5b602dd35c75748958f372c644dd3e7713fccff1b749c48af
-
SHA512
9806bf4d093eb19e604a727e2aae711f8f0835af1f16364e3cb8096109f569afabeba04b6559c7f474abd758470859478fb2a7d0aa1b4bea1fe6ec1f3af635b3
-
SSDEEP
12288:mP/GfZcCZZUFhQchZ//pWX1bWB1cEE2T:o/GfZPZZAoAT
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 7 IoCs
description pid Process procid_target PID 2876 wrote to memory of 2356 2876 rundll32.exe 28 PID 2876 wrote to memory of 2356 2876 rundll32.exe 28 PID 2876 wrote to memory of 2356 2876 rundll32.exe 28 PID 2876 wrote to memory of 2356 2876 rundll32.exe 28 PID 2876 wrote to memory of 2356 2876 rundll32.exe 28 PID 2876 wrote to memory of 2356 2876 rundll32.exe 28 PID 2876 wrote to memory of 2356 2876 rundll32.exe 28
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\r128gain-0.9.7-2\r128gain-tools\avfilter-2.dll,#11⤵
- Suspicious use of WriteProcessMemory
PID:2876 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\r128gain-0.9.7-2\r128gain-tools\avfilter-2.dll,#12⤵PID:2356
-