Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
7Static
static
3eMule0.70a...64.exe
windows10-2004-x64
7$PLUGINSDI...ol.dll
windows10-2004-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3LinkCreator.exe
windows10-2004-x64
1Uninstall.exe
windows10-2004-x64
7eMule Light.js
windows10-2004-x64
1eMule.js
windows10-2004-x64
1emule.exe
windows10-2004-x64
1lang/ar_AE.dll
windows10-2004-x64
1lang/ba_BA.dll
windows10-2004-x64
1lang/bg_BG.dll
windows10-2004-x64
1lang/ca_ES.dll
windows10-2004-x64
1lang/cz_CZ.dll
windows10-2004-x64
1lang/da_DK.dll
windows10-2004-x64
1lang/de_DE.dll
windows10-2004-x64
1lang/el_GR.dll
windows10-2004-x64
1lang/es_AS.dll
windows10-2004-x64
1lang/es_ES_T.dll
windows10-2004-x64
1lang/et_EE.dll
windows10-2004-x64
1lang/fa_IR.dll
windows10-2004-x64
1lang/fi_FI.dll
windows10-2004-x64
1lang/fr_BR.dll
windows10-2004-x64
1lang/fr_FR.dll
windows10-2004-x64
1lang/gl_ES.dll
windows10-2004-x64
1lang/he_IL.dll
windows10-2004-x64
1lang/hu_HU.dll
windows10-2004-x64
1lang/it_IT.dll
windows10-2004-x64
1lang/jp_JP.dll
windows10-2004-x64
1lang/ko_KR.dll
windows10-2004-x64
1lang/lt_LT.dll
windows10-2004-x64
1Analysis
-
max time kernel
1172s -
max time network
1174s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
21/02/2024, 10:55
Static task
static1
Behavioral task
behavioral1
Sample
eMule0.70a-Installer64.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral2
Sample
$PLUGINSDIR/AccessControl.dll
Resource
win10v2004-20240220-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240220-en
Behavioral task
behavioral6
Sample
LinkCreator.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral7
Sample
Uninstall.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral8
Sample
eMule Light.js
Resource
win10v2004-20240220-en
Behavioral task
behavioral9
Sample
eMule.js
Resource
win10v2004-20240220-en
Behavioral task
behavioral10
Sample
emule.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral11
Sample
lang/ar_AE.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral12
Sample
lang/ba_BA.dll
Resource
win10v2004-20240220-en
Behavioral task
behavioral13
Sample
lang/bg_BG.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral14
Sample
lang/ca_ES.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral15
Sample
lang/cz_CZ.dll
Resource
win10v2004-20240220-en
Behavioral task
behavioral16
Sample
lang/da_DK.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral17
Sample
lang/de_DE.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral18
Sample
lang/el_GR.dll
Resource
win10v2004-20240220-en
Behavioral task
behavioral19
Sample
lang/es_AS.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral20
Sample
lang/es_ES_T.dll
Resource
win10v2004-20240220-en
Behavioral task
behavioral21
Sample
lang/et_EE.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral22
Sample
lang/fa_IR.dll
Resource
win10v2004-20240220-en
Behavioral task
behavioral23
Sample
lang/fi_FI.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral24
Sample
lang/fr_BR.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral25
Sample
lang/fr_FR.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral26
Sample
lang/gl_ES.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral27
Sample
lang/he_IL.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral28
Sample
lang/hu_HU.dll
Resource
win10v2004-20240220-en
Behavioral task
behavioral29
Sample
lang/it_IT.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral30
Sample
lang/jp_JP.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral31
Sample
lang/ko_KR.dll
Resource
win10v2004-20240220-en
Behavioral task
behavioral32
Sample
lang/lt_LT.dll
Resource
win10v2004-20231215-en
General
-
Target
lang/es_AS.dll
-
Size
97KB
-
MD5
17e1bdd79c3a99f1c46e2e3007c27d0f
-
SHA1
f1b7dface3cf3d56fe7f1a8320d8c360b1a77f88
-
SHA256
f87e73a8421d2ec2ce9be3b13a6289e3246ff3eb06bc6ec9c8df95b66dc9982d
-
SHA512
62947d517813e7946a930639c0e311c6f86c85bea60d052e98cbdb3dbc9e1138f7027e8e3f476f31a19e8e306dd70cce01c12d45ec95925b1fce84c8b8d0647d
-
SSDEEP
1536:AqOhjhuaW0NgAFUa/IpaDwe+FaTTvTZCupR0sPRdqDF:laW0pcbFVII
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeManageVolumePrivilege 3612 svchost.exe
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\lang\es_AS.dll,#11⤵PID:3088
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe1⤵PID:2224
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k UnistackSvcGroup1⤵
- Suspicious use of AdjustPrivilegeToken
PID:3612