Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

4

Static

static

3

tesseract-...05.exe

windows7-x64

4

tesseract-...05.exe

windows10-2004-x64

4

$PLUGINSDIR/INetC.dll

windows7-x64

3

$PLUGINSDIR/INetC.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...nu.dll

windows7-x64

3

$PLUGINSDI...nu.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...fo.dll

windows7-x64

3

$PLUGINSDI...fo.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

ambiguous_...1.html

windows7-x64

1

ambiguous_...1.html

windows10-2004-x64

1

ambiguous_words.exe

windows7-x64

1

ambiguous_words.exe

windows10-2004-x64

1

classifier...1.html

windows7-x64

1

classifier...1.html

windows10-2004-x64

1

classifier_tester.exe

windows7-x64

1

classifier_tester.exe

windows10-2004-x64

1

cntraining.1.html

windows7-x64

1

cntraining.1.html

windows10-2004-x64

1

cntraining.exe

windows7-x64

1

cntraining.exe

windows10-2004-x64

1

combine_la...1.html

windows7-x64

1

combine_la...1.html

windows10-2004-x64

1

combine_la...el.exe

windows7-x64

1

combine_la...el.exe

windows10-2004-x64

1

combine_te...1.html

windows7-x64

1

combine_te...1.html

windows10-2004-x64

1

Analysis

  • max time kernel
    301s
  • max time network
    310s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    12/03/2024, 22:20

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    tesseract-ocr-w64-setup-5.3.3.20231005.exe

  • Size

    47.8MB

  • MD5

    6e11fbca5a293bf79bbb544fa35dd67c

  • SHA1

    e7a4de76b0da06ed1857728ac9c16083d8b79c90

  • SHA256

    79af1f9153b8ff988baffaa164fc70799950078f887e2c93dc3fa7efed674b21

  • SHA512

    37f3f1cc0ee84709b9fdc6d4242fe23a7109d164a008461e80d4b40092ca19bbc053779205b26692abb98798c28d6d18fa39628c60441112c7eaadb519f53837

  • SSDEEP

    786432:yWCoFFSzeTjaz7i05m+VvfftWUlmbirs5KoNArCCszNJHqYFBMbwPyp:yWCOF0eTgp5xv0virsUoNFJHdSwyp

Score
4/10

Malware Config

Signatures

  • Loads dropped DLL 4 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

Processes

  • C:\Users\Admin\AppData\Local\Temp\tesseract-ocr-w64-setup-5.3.3.20231005.exe
    "C:\Users\Admin\AppData\Local\Temp\tesseract-ocr-w64-setup-5.3.3.20231005.exe"
    1⤵
    • Loads dropped DLL
    PID:564

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\nsw70EC.tmp\LangDLL.dll
    Filesize

    8KB

    MD5

    2ac83ff9f2eb44ee250e2007423f7784

    SHA1

    d7fe9e3db03a24b603a4a61ec287fa2c1073d364

    SHA256

    1f9ef3943d58dd80a774a5a81578b48bc90f494025e71f6e40ef7def3a06ddf2

    SHA512

    0aebd903e1a77bec0fac7a1f2ad88e57b9bcb07b351907164f4e674150f1c02807b7667b6fc04fd1e5b27607bbfa87cc179b03f10762b4bb781a3dfbed6c97bf

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\nsw70EC.tmp\System.dll
    Filesize

    31KB

    MD5

    dab726bff7cb0f079d232b2c4d0efd8d

    SHA1

    4d0ebe0facbb66c9c03e3f6b5beb411cb75d9ec9

    SHA256

    9d46463e1925bf29cd86c7a56ccf540f1eeef3cb50064a222b84703436cd7e8c

    SHA512

    6aa6097777afdcb073b8fc8ace1a244ac9215ec152720d8b4a32f6196181b135a900491c7fea72bf1df9ed69e51b90cd21eca4ed902d8503d0b1b04c162a2162

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\nsw70EC.tmp\UserInfo.dll
    Filesize

    7KB

    MD5

    d45e6d34a3db2f350fa56b066962c8fe

    SHA1

    354987e974561a9ee397877432cbb35363ac4e67

    SHA256

    67ae64f52d6d84407820d09304fb12f5808e8caf332f6092bd0a722ec5977894

    SHA512

    e0bf5810a74f447a04c16625e21e6aae1cf65886d26cef0ed747c8ec4b107229573ad58ee5fbc2c034c6d16d7cb71ce4534515ff843457cb37b7490f44657b8b

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\nsw70EC.tmp\nsDialogs.dll
    Filesize

    14KB

    MD5

    494c8f9c6a5fc302e8b50f05ef9aeb8c

    SHA1

    75fe258210f0989a7afaecd42e45841d076dc8b8

    SHA256

    e9ab864697d454cd4a85abf38ec4236ee56ddd0c59f9422ae1e774b9487f132d

    SHA512

    363780eeded89bd720addb11ef42893d13852fe1c446305cbda73cf994da6848338458f2da4eafa42857533e6fc30e24f6db3b36df5f7cc51b9307010ddfa401

    Download Submit

  • memory/564-8-0x0000000000400000-0x0000000000479000-memory.dmp

    Filesize

    484KB

    Download

  • memory/564-9-0x0000000074B30000-0x0000000074B40000-memory.dmp

    Filesize

    64KB

    Download

  • memory/564-10-0x00000000745C0000-0x00000000745CA000-memory.dmp

    Filesize

    40KB

    Download

  • memory/564-25-0x0000000000400000-0x0000000000479000-memory.dmp

    Filesize

    484KB

    Download

  • memory/564-26-0x0000000074B30000-0x0000000074B40000-memory.dmp

    Filesize

    64KB

    Download

  • memory/564-27-0x00000000744E0000-0x00000000744EC000-memory.dmp

    Filesize

    48KB

    Download