Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
10Static
static
10SMS sender 2023.zip
windows10-1703-x64
1SMS sender...7z.dll
windows10-1703-x64
1SMS sender...7z.exe
windows10-1703-x64
1SMS sender...te.zip
windows10-1703-x64
1ServerCertificate.p12
windows10-1703-x64
5SMS sender...to.dll
windows10-1703-x64
1SMS sender...ox.dll
windows10-1703-x64
1SMS sender...er.bat
windows10-1703-x64
5SMS sender...or.dll
windows10-1703-x64
1SMS sender...es.dll
windows10-1703-x64
1SMS sender...23.exe
windows10-1703-x64
10SMS sender...te.p12
windows10-1703-x64
1SMS sender...UI.dll
windows10-1703-x64
1SMS sender...UI.dll
windows10-1703-x64
1SMS sender...ip.dll
windows10-1703-x64
1SMS sender...ub.exe
windows10-1703-x64
10SMS sender...te.dll
windows10-1703-x64
1SMS sender...lt.dll
windows10-1703-x64
1SMS sender...Ip.dll
windows10-1703-x64
1SMS sender...ib.dll
windows10-1703-x64
1SMS sender...le.zip
windows10-1703-x64
1Analysis
-
max time kernel
315s -
max time network
893s -
platform
windows10-1703_x64 -
resource
win10-20231215-en -
resource tags
arch:x64arch:x86image:win10-20231215-enlocale:en-usos:windows10-1703-x64system -
submitted
02/02/2024, 15:54 UTC
Behavioral task
behavioral1
Sample
SMS sender 2023.zip
Resource
win10-20231215-en
Behavioral task
behavioral2
Sample
SMS sender 2023/SMS sender 2023/7z.dll
Resource
win10-20231215-en
Behavioral task
behavioral3
Sample
SMS sender 2023/SMS sender 2023/7z.exe
Resource
win10-20231220-en
Behavioral task
behavioral4
Sample
SMS sender 2023/SMS sender 2023/BackupCertificate.zip
Resource
win10-20231215-en
Behavioral task
behavioral5
Sample
ServerCertificate.p12
Resource
win10-20231220-en
Behavioral task
behavioral6
Sample
SMS sender 2023/SMS sender 2023/BouncyCastle.Crypto.dll
Resource
win10-20231215-en
Behavioral task
behavioral7
Sample
SMS sender 2023/SMS sender 2023/FastColoredTextBox.dll
Resource
win10-20231220-en
Behavioral task
behavioral8
Sample
SMS sender 2023/SMS sender 2023/Fixer.bat
Resource
win10-20231215-en
Behavioral task
behavioral9
Sample
SMS sender 2023/SMS sender 2023/IconExtractor.dll
Resource
win10-20231215-en
Behavioral task
behavioral10
Sample
SMS sender 2023/SMS sender 2023/InstallResources.dll
Resource
win10-20231215-en
Behavioral task
behavioral11
Sample
SMS sender 2023/SMS sender 2023/SMS sender 2023.exe
Resource
win10-20231215-en
Behavioral task
behavioral12
Sample
SMS sender 2023/SMS sender 2023/ServerCertificate.p12
Resource
win10-20231215-en
Behavioral task
behavioral13
Sample
SMS sender 2023/SMS sender 2023/Siticone.Desktop.UI.dll
Resource
win10-20231215-en
Behavioral task
behavioral14
Sample
SMS sender 2023/SMS sender 2023/Siticone.UI.dll
Resource
win10-20231215-en
Behavioral task
behavioral15
Sample
SMS sender 2023/SMS sender 2023/Stub/DotNetZip.dll
Resource
win10-20231215-en
Behavioral task
behavioral16
Sample
SMS sender 2023/SMS sender 2023/Stub/Stub.exe
Resource
win10-20231215-en
Behavioral task
behavioral17
Sample
SMS sender 2023/SMS sender 2023/System.Data.SQLite.dll
Resource
win10-20231215-en
Behavioral task
behavioral18
Sample
SMS sender 2023/SMS sender 2023/ToolBelt.dll
Resource
win10-20231215-en
Behavioral task
behavioral19
Sample
SMS sender 2023/SMS sender 2023/cGeoIp.dll
Resource
win10-20231215-en
Behavioral task
behavioral20
Sample
SMS sender 2023/SMS sender 2023/dnlib.dll
Resource
win10-20231220-en
Behavioral task
behavioral21
Sample
SMS sender 2023/SMS sender 2023/file.zip
Resource
win10-20231215-en
General
-
Target
SMS sender 2023/SMS sender 2023/Siticone.UI.dll
-
Size
1.3MB
-
MD5
750c58af2e56b6addecffcf152520ab8
-
SHA1
14995e7f1d12498606d9d209d78d55fe6fd87802
-
SHA256
27c56a28cbde094157206da1bfcd7a395111ab97b8a5ff600b11c2175dcefb26
-
SHA512
2179790e23f61b3dfea828457f8609279c70b1e071cddc73b1dbda02caa664e0aae2553fc24a4956f9e89c477d66b1a704bde26fa23bc6db26c19e18db00abb5
-
SSDEEP
24576:QVMCtIZJntOFmMlMqPilaiS4Yr6ugPngPfjv9tLF2cH8gb:u8NlaVeuHFb
Malware Config
Signatures
Processes
Network
-
Remote address:8.8.8.8:53Request79.121.231.20.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request57.110.18.2.in-addr.arpaIN PTRResponse57.110.18.2.in-addr.arpaIN PTRa2-18-110-57deploystaticakamaitechnologiescom
-
Remote address:8.8.8.8:53Request30.243.111.52.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request178.178.17.96.in-addr.arpaIN PTRResponse178.178.17.96.in-addr.arpaIN PTRa96-17-178-178deploystaticakamaitechnologiescom
-
Remote address:8.8.8.8:53Request5.173.189.20.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request0.205.248.87.in-addr.arpaIN PTRResponse0.205.248.87.in-addr.arpaIN PTRhttps-87-248-205-0lgwllnwnet
-
72 B 158 B 1 1
DNS Request
79.121.231.20.in-addr.arpa
-
70 B 133 B 1 1
DNS Request
57.110.18.2.in-addr.arpa
-
72 B 158 B 1 1
DNS Request
30.243.111.52.in-addr.arpa
-
72 B 137 B 1 1
DNS Request
178.178.17.96.in-addr.arpa
-
71 B 157 B 1 1
DNS Request
5.173.189.20.in-addr.arpa
-
71 B 116 B 1 1
DNS Request
0.205.248.87.in-addr.arpa