Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

c6740e161c...43.exe

windows7-x64

7

c6740e161c...43.exe

windows10-2004-x64

7

"aminstall.dll

windows7-x64

1

"aminstall.dll

windows10-2004-x64

3

"solitaire.exe

windows7-x64

1

"solitaire.exe

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...nu.dll

windows7-x64

3

$PLUGINSDI...nu.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

Uninstall.exe

windows7-x64

7

Uninstall.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

fmod.dll

windows7-x64

7

fmod.dll

windows10-2004-x64

7

Analysis

  • max time kernel
    118s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    13/03/2024, 17:23

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    c6740e161c1c531450aadc70a6b98643.exe

  • Size

    3.0MB

  • MD5

    c6740e161c1c531450aadc70a6b98643

  • SHA1

    ccd344c9833dd02662d81c864504d6b8ead208c8

  • SHA256

    e86ddd63bce81ceda1e30756ea9cea3cd87fb7fb9f6870992fdae4240346fe20

  • SHA512

    d3bce2a1ba79a60052fe3e2c73450965b56194feb889cf3761f7b7cf442395cae6e9058c2c5a827d103e1506e60cabe831186a5e2a1c349d5d20e9946ecba14e

  • SSDEEP

    98304:Ek4gyY1nreB41lPyO37TLN1aavvKScI1iBXwJ8:EkXyYpyB43PLvAXU8

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 2 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\c6740e161c1c531450aadc70a6b98643.exe
    "C:\Users\Admin\AppData\Local\Temp\c6740e161c1c531450aadc70a6b98643.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious behavior: GetForegroundWindowSpam
    PID:2932

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\nsi4319.tmp\ioSpecial.ini
    Filesize

    702B

    MD5

    ccc4d3ee6b1f79b3498fdbe2ed09011c

    SHA1

    4eb762da5777108d63a29521fed0bcc146948a9c

    SHA256

    51ba6c0c6ff1de363c3a7bd4ba3c171e55f5bbaaeb3e2bd8a9b47e8fcae89d6e

    SHA512

    e345d6eaa467062c1a03d2f1ffdb0c73d17db0ee5f3548e0b498aab632849921f7bfecea30ddb9c8691ab7d690d9367cc6f22456f0323715f12e08bd7ff970af

    Download Submit

  • \Users\Admin\AppData\Local\Temp\nsi4319.tmp\InstallOptions.dll
    Filesize

    12KB

    MD5

    4c7d97d0786ff08b20d0e8315b5fc3cb

    SHA1

    bb6f475e867b2bf55e4cd214bd4ef68e26d70f6c

    SHA256

    75e20f4c5eb00e9e5cb610273023e9d2c36392fa3b664c264b736c7cc2d1ac84

    SHA512

    f37093fd5cdda74d8f7376c60a05b442f884e9d370347c7c39d84eca88f23fbea6221da2e57197acd78c817a74703c49fb28b89d41c3e34817cc9301b0b6485a

    Download Submit

  • \Users\Admin\AppData\Local\Temp\nsi4319.tmp\System.dll
    Filesize

    9KB

    MD5

    e085476805e8f5ef1c7ed635c5309017

    SHA1

    609e79fdc29d6dee40cc5dd333094db5f9f63eec

    SHA256

    4eb689e2db8d683afcfffe6dee1985fbd458d2770093547331d563acece80c67

    SHA512

    082932aea8d993de8ca1eeb60f7bb4e56cc7eab4a683c59822b2c544223febab5915bb2b7c2e2dad79472bbd8ad400770dd7c1f112cef24d18ebd0f1ad63fe9f

    Download Submit