Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

212bc3ead4...de.exe

windows7-x64

7

212bc3ead4...de.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

loadmov.html

windows7-x64

1

loadmov.html

windows10-2004-x64

1

loadmusic.html

windows7-x64

1

loadmusic.html

windows10-2004-x64

1

loadtv.html

windows7-x64

1

loadtv.html

windows10-2004-x64

1

mov.exe

windows7-x64

1

mov.exe

windows10-2004-x64

1

start.html

windows7-x64

1

start.html

windows10-2004-x64

1

uninst.exe

windows7-x64

7

uninst.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    147s
  • max time network
    157s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    13/03/2024, 18:10

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    212bc3ead48049a4a09b9bc2fb3d058800a76d73d82fe345e2db931bd270f2de.exe

  • Size

    711KB

  • MD5

    4d85e653d194f6bbe6291cc1bec95220

  • SHA1

    8da5c1459b6a3701878af97e0c4808df44deb7ac

  • SHA256

    212bc3ead48049a4a09b9bc2fb3d058800a76d73d82fe345e2db931bd270f2de

  • SHA512

    d32cea52151974f1b835aef56273d4734b40fa1639793c7ef4947e627a01b20e3af79896e463501a5a900462e0cfa3f83199f3acf46293b2d71ccce2725f0856

  • SSDEEP

    12288:Uyi3pbKzoNlYzsJ289GrMCxHhmTTQWmTeNMx2VmnHoZQuDVrg1eob6HwOI4:UyiFKzq2892MCxHhmgHH2VmHX4VrgAos

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

Processes

  • C:\Users\Admin\AppData\Local\Temp\212bc3ead48049a4a09b9bc2fb3d058800a76d73d82fe345e2db931bd270f2de.exe
    "C:\Users\Admin\AppData\Local\Temp\212bc3ead48049a4a09b9bc2fb3d058800a76d73d82fe345e2db931bd270f2de.exe"
    1⤵
    • Loads dropped DLL
    PID:2968

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\nsc6543.tmp\InstallOptions.dll
    Filesize

    14KB

    MD5

    fa5beae80dba254fb6c21b58265f5310

    SHA1

    f2f776611dbbb157b151aa744a7e0be1d4b8c079

    SHA256

    34b8a2130729064ca2f9b3b8e6f90d883d84662156b648a4eeccefefc3473269

    SHA512

    7c74b9e9f1ff0665ffd6fcf76fca462d9f4fbd7c4a215bc67b419497ef4c3cb9cede6c5b0803cabb316bc5391c4c6f0d578d36e1094b8ed326b140f8e272b538

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\nsc6543.tmp\ioSpecial.ini
    Filesize

    591B

    MD5

    8474f98703932191ab85ac3e499b4f73

    SHA1

    07f2d05a474f2a67f43d212aa1b2888686197cb1

    SHA256

    4e013620eb8357206eb3f6518af406d27f33dcff5ef314cb8efe59fb1cd1b6db

    SHA512

    5cda9462eecd67129ca07629e17a65eae6e7089891418f140a8062ac686b757739e876e63645922d65d27b22b9b44252037019c02f043d85b93ec18ac8843d4d

    Download Submit