Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

5

Static

static

3

FiveModsSetup.exe

windows10-2004-x64

5

$PLUGINSDI...er.dll

windows10-2004-x64

1

$PLUGINSDI...ls.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...ll.dll

windows10-2004-x64

3

resources/...ils.js

windows10-2004-x64

1

resources/...oon.js

windows10-2004-x64

1

resources/...owl.js

windows10-2004-x64

1

resources/...ter.js

windows10-2004-x64

1

resources/...end.js

windows10-2004-x64

1

resources/...ter.js

windows10-2004-x64

1

resources/...tifier

windows10-2004-x64

1

resources/...nt.rtf

windows10-2004-x64

1

resources/...fu.exe

windows10-2004-x64

1

resources/...64.exe

windows10-2004-x64

1

resources/...64.exe

windows10-2004-x64

4

resources/...86.exe

windows10-2004-x64

4

resources/...st.exe

windows10-2004-x64

1

resources/...dex.js

windows10-2004-x64

1

resources/...dex.js

windows10-2004-x64

1

resources/...64.exe

windows10-2004-x64

1

resources/...86.exe

windows10-2004-x64

1

resources/elevate.exe

windows10-2004-x64

1

vk_swiftshader.dll

windows10-2004-x64

1

vulkan-1.dll

windows10-2004-x64

1

$PLUGINSDI...ec.dll

windows10-2004-x64

3

$PLUGINSDI...7z.dll

windows10-2004-x64

3

$R0/Uninst...ds.exe

windows10-2004-x64

5

$PLUGINSDI...ls.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...ll.dll

windows10-2004-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

Resubmissions

19/02/2024, 20:31

240219-za6qxsdb56 5

Analysis

  • max time kernel
    129s
  • max time network
    161s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19/02/2024, 20:31

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    resources/app.asar.unpacked/node_modules/ps-list/vendor/fastlist-0.3.0-x64.exe

  • Size

    286KB

  • MD5

    ae781efe1a844c93b989729ee512967b

  • SHA1

    40d5e32e06272ffcae7d366bf7127f5605d6fbde

  • SHA256

    e471ba960a8861e5fa515570f8b77a08f47dc800351e04fb7aff9fcbb120346b

  • SHA512

    df2278e1c8c4556030f8d2840de342e315563deb9e357e11e5c50cd7db9ef3bdf2fdf6de3b0a009136af50056d63fc99f545c0cbcc68b119ad3bfb75f65e5518

  • SSDEEP

    6144:YxxmnATc41sT3iVSd87fqCHeohyRDaFsIhg8M:axmnz41s+VSsfT+o4

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\resources\app.asar.unpacked\node_modules\ps-list\vendor\fastlist-0.3.0-x64.exe
    "C:\Users\Admin\AppData\Local\Temp\resources\app.asar.unpacked\node_modules\ps-list\vendor\fastlist-0.3.0-x64.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:3756

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads