Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
7Static
static
3bd939a3d53...08.exe
windows7-x64
7bd939a3d53...08.exe
windows10-2004-x64
7$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3RadioBump.exe
windows7-x64
3RadioBump.exe
windows10-2004-x64
3bass.dll
windows7-x64
1bass.dll
windows10-2004-x64
1basswma.dll
windows7-x64
1basswma.dll
windows10-2004-x64
1uninstproc.exe
windows7-x64
1uninstproc.exe
windows10-2004-x64
1Analysis
-
max time kernel
149s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
10/03/2024, 03:43
Static task
static1
Behavioral task
behavioral1
Sample
bd939a3d53e0d03da8e7e377141d9608.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bd939a3d53e0d03da8e7e377141d9608.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240220-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
RadioBump.exe
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
RadioBump.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
bass.dll
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
bass.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral9
Sample
basswma.dll
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
basswma.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
uninstproc.exe
Resource
win7-20231129-en
Behavioral task
behavioral12
Sample
uninstproc.exe
Resource
win10v2004-20240226-en
General
-
Target
bd939a3d53e0d03da8e7e377141d9608.exe
-
Size
2.4MB
-
MD5
bd939a3d53e0d03da8e7e377141d9608
-
SHA1
5b98c72c79c7587b9760bda31aa6d4849d6224fd
-
SHA256
afaa8a729955493cbe50a2faba52c79c0f028a5e0b522f13ca3807be71d0c808
-
SHA512
bf0a100b15e032b8cd6bf0cc57c462077eeb0f01cd63eeee3af0bea5ae8f1857957cdb3fb7825394688ce30b5f6b6f0248a5835dbaf65ae06c5905e1967c157c
-
SSDEEP
49152:LZohMAIJdxck3egSGTCNcaYC3/1VnE82elDFxd+SEZp+:LgMbnrugSMCNcaYALEHelDFnxm+
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
pid Process 2324 bd939a3d53e0d03da8e7e377141d9608.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
14KB
MD5325b008aec81e5aaa57096f05d4212b5
SHA127a2d89747a20305b6518438eff5b9f57f7df5c3
SHA256c9cd5c9609e70005926ae5171726a4142ffbcccc771d307efcd195dafc1e6b4b
SHA51218362b3aee529a27e85cc087627ecf6e2d21196d725f499c4a185cb3a380999f43ff1833a8ebec3f5ba1d3a113ef83185770e663854121f2d8b885790115afdf
-
Filesize
686B
MD53044e7911a5fc3e542c0cf79478509d6
SHA11e346efbe4fbf3f9d9eeb7f38c863dc5036e4ea4
SHA2569148066ddad09ef4229df2bc34592c9bc3ff9780400370cb044de44081731e3a
SHA5122b2e3986bc1aba6e0c99d49dbe1edcc504e5b70bbef8675bfeed5c479f30087bbf19469dabcdbeec54c79c886943169bfce950b376582f62f330fd993c4d321f