Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
3Static
static
3RoundedTB_...r3.dll
windows10-2004-x64
1RoundedTB_...r3.dll
windows7-x64
1RoundedTB_...r3.dll
windows10-2004-x64
1RoundedTB_...r3.dll
windows7-x64
1RoundedTB_...r3.dll
windows10-2004-x64
1RoundedTB_...TB.exe
windows7-x64
1RoundedTB_...TB.exe
windows10-2004-x64
1RoundedTB_...ni.dll
windows7-x64
1RoundedTB_...ni.dll
windows10-2004-x64
1RoundedTB_...r3.dll
windows7-x64
1RoundedTB_...r3.dll
windows10-2004-x64
1RoundedTB_...r3.dll
windows7-x64
1RoundedTB_...r3.dll
windows10-2004-x64
1Analysis
-
max time kernel
151s -
max time network
166s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
06/03/2024, 12:54
Static task
static1
Behavioral task
behavioral1
Sample
RoundedTB_canary20231016_2/RoundedTB/D3DCompiler_47_cor3.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral2
Sample
RoundedTB_canary20231016_2/RoundedTB/PenImc_cor3.dll
Resource
win7-20240221-en
Behavioral task
behavioral3
Sample
RoundedTB_canary20231016_2/RoundedTB/PenImc_cor3.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral4
Sample
RoundedTB_canary20231016_2/RoundedTB/PresentationNative_cor3.dll
Resource
win7-20240221-en
Behavioral task
behavioral5
Sample
RoundedTB_canary20231016_2/RoundedTB/PresentationNative_cor3.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral6
Sample
RoundedTB_canary20231016_2/RoundedTB/RoundedTB.exe
Resource
win7-20240215-en
Behavioral task
behavioral7
Sample
RoundedTB_canary20231016_2/RoundedTB/RoundedTB.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral8
Sample
RoundedTB_canary20231016_2/RoundedTB/sni.dll
Resource
win7-20240221-en
Behavioral task
behavioral9
Sample
RoundedTB_canary20231016_2/RoundedTB/sni.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral10
Sample
RoundedTB_canary20231016_2/RoundedTB/vcruntime140_cor3.dll
Resource
win7-20240221-en
Behavioral task
behavioral11
Sample
RoundedTB_canary20231016_2/RoundedTB/vcruntime140_cor3.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral12
Sample
RoundedTB_canary20231016_2/RoundedTB/wpfgfx_cor3.dll
Resource
win7-20240221-en
Behavioral task
behavioral13
Sample
RoundedTB_canary20231016_2/RoundedTB/wpfgfx_cor3.dll
Resource
win10v2004-20240226-en
General
-
Target
RoundedTB_canary20231016_2/RoundedTB/wpfgfx_cor3.dll
-
Size
1.9MB
-
MD5
b6ceca7dfded8815e1968d8bd2377ea3
-
SHA1
6dfd0f8bdab3f8ce796a3bc18cf9ac32dd8b8d9e
-
SHA256
09c4b6806b59060339ce6e8fdaf4da145a88179328dedff9534b9483a66566f0
-
SHA512
a6b058494d7e741f36e5ed60e6d9cd49b8f7ceb9bd14f40bf2c02b63355dee74f99c27f75c82e180ef2342287f02e798be99f9bdec879574e78151f0819fc20d
-
SSDEEP
24576:J/XEktqAzKItIzYa7p3NmIvLOnHcjDet6EEC8jml8htD8kqDD1K:CrAzzI8a13NmfH8e1EC+h+1RK
Malware Config
Signatures
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\RoundedTB_canary20231016_2\RoundedTB\wpfgfx_cor3.dll,#11⤵PID:416
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=4356 --field-trial-handle=2256,i,6670388345726423024,18382795228658886258,262144 --variations-seed-version /prefetch:81⤵PID:2024