Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
146s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
-
submitted
14/03/2024, 18:42
General
-
Target
driver4vr-setup.exe
-
Size
43.3MB
-
MD5
f5008c8fd276499ece97684b0a017b85
-
SHA1
eb92df78711ae4abed2d50fa420bd33b36f46bed
-
SHA256
e41a9902c27177517b5216d8e591c5dd3672710eeb57a5b73640b6b49590aeee
-
SHA512
0a49a84cfef12ab2853191bb19e0e9de20966b810151f8e565f124f148cfa24f0cb274336348da20996a15d298eabaf30b82712ca33759064b0295ca7ba58fbd
-
SSDEEP
786432:s702wAPJDuZA+oHESD8ZLjIleSjI/BBjbZ1tWc4Df0Oo0tctwJlEEuFIkad:oVV5uZ4FIKebbrcce9FctOlrtks
Malware Config
Signatures
-
Executes dropped EXE 3 IoCs
-
Loads dropped DLL 11 IoCs
-
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in Program Files directory 64 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies system certificate store 2 TTPs 5 IoCs
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of FindShellTrayWindow 2 IoCs
-
Suspicious use of WriteProcessMemory 5 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\driver4vr-setup.exe"C:\Users\Admin\AppData\Local\Temp\driver4vr-setup.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\is-V16SD.tmp\driver4vr-setup.tmp"C:\Users\Admin\AppData\Local\Temp\is-V16SD.tmp\driver4vr-setup.tmp" /SL5="$60232,45134229,57856,C:\Users\Admin\AppData\Local\Temp\driver4vr-setup.exe"2⤵
- Executes dropped EXE
- Drops file in Program Files directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
-
C:\Program Files (x86)\Driver4VR\Installer.exe"C:\Program Files (x86)\Driver4VR\Installer.exe" /installer3⤵
- Executes dropped EXE
- Loads dropped DLL
-
-
-
C:\Program Files (x86)\Driver4VR\Driver4VR.exe"C:\Program Files (x86)\Driver4VR\Driver4VR.exe"1⤵
- Executes dropped EXE
- Loads dropped DLL
- Modifies system certificate store
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3.7MB
MD5b33661fa9f7b2a78f4944c5855153528
SHA1bb2e3754ddf95896f5f47ad20e4b93471da5ddca
SHA256261218b7ccf3cdb4878ad26222bdf119ab672cc7f26dfa8d14deee9efd3aaf51
SHA5125b0ab95b63982ed9c1ee26870a04589079f2740a0efda4fac8c8f936e974b5d22f71ff1cbeba8b898d5ff394f58534fda4c2ccb018134214066dda1c11aef8f2
-
Filesize
4.1MB
MD58aa1c2eb55572b8e0fee3bd30dda9d9c
SHA1bb0473cf0747db7206e020e176eecda93ce85ad9
SHA2566bbb8d6eb89d1d4f3fd3c9e74b47e66016b29294ee055116baac5834efaa2c2b
SHA512369c4b42bd0a01e7db25e9f737f98a8a1b2d95e833df21ed633b145b8b22fa9049771d50ac2060161985ebc28cc90844d623be3cc44bf990027d045fc13868f4
-
Filesize
3.8MB
MD5d8ed40a95c368b21b125edd182254daf
SHA14e3c48d484f6b4a1adea5de455519c53cacc28bf
SHA25663d8c4449ffbc4cc6681046714484d236596a640e53057973ea65472d65016f2
SHA512251786bb9eea113d68c7c91d804a4576e741be6eb501e1d0e3b67a8bd91a82e6aeea7e6e132532318f0e5ab1f889580e75006280f3406855de101ad22bfb2ceb
-
Filesize
185KB
MD560599998b17bd2b880757f4e09daa4d4
SHA1f3e836cac13bb812c917b2dd1d9a0522622510e4
SHA25653ace2e0b337a1db793a1c62ba3216af2407c353f382ef0e6986258b86965edd
SHA51237573969efa5337ecae02cd152245297eed5c8f0b316d7a1704dfe1637345c3be8a36304d263ad269838877c8720eda739294912ebcbf544e81b9f0212eef740
-
Filesize
48KB
MD572c3f5bf5c3dc58a2b583d17b78de551
SHA165697ec498b1cdb6391252ff6d63fabff0adce06
SHA25624876e61a6936acebc086227cdd916f40d1d55813e61c2918e10d4d8e8cfdbb3
SHA512f403a46ebd07f735d22bddcd2b65473e9d0328b3dc4b1809f20b6d8e58cf4e6e03404746423dcd12d85ce82e9407da429048f74b1e207fd3b85560ddc45949e5
-
Filesize
686KB
MD5875652af2c5f9a4ceb31d6b5ec54c6f6
SHA131c7e2149afe6190ec26015771578914caa55ea3
SHA25609edcc6e607476a417c80dc369da16dec005e50bec41cc56f325be1dcbd26e74
SHA512782c82b536777f80e956dc296429b7c129227a32670e330cff41465a3ced7821f7e8ae8ccd60151b0e8774f3723ed433f42688698830370410cc580a0adda3ba
-
Filesize
156KB
MD5958df4238ddb86a116acbfceb39c4c93
SHA12f89c0234eaafc94407db781f2253d77760e3e1b
SHA256ab19f6647a0283f40f76a9d970ce7929907472a44689dcbc342c194e502e022e
SHA5128ea0e6e9787541fa1980b96c048975921955bff7b0bd4cdf66a55c45ef19e17e472c2bc9caa9d0b7bcba1233b390066034d516cf050e8670f67a763b5cd321ed
-
Filesize
638KB
MD5f33cbe589b769956284868104686cc2d
SHA12fb0be100de03680fc4309c9fa5a29e69397a980
SHA256973fd70ce48e5ac433a101b42871680c51e2feba2aeec3d400dea4115af3a278
SHA512ffd65f6487bc71c967abcf90a666080c67b8db010d5282d2060c9d87a9828519a14f5d3a6fe76d81e1d3251c2104a2e9e6186af0effd5f331b1342682811ebf4
-
Filesize
177KB
MD55a498300ad5fca565ff423d220a4c051
SHA10439fe74ed57983e450079eef9ba9ad403700493
SHA256d917f63fbe3c67683e50734a48d63c1884c7664cbe321f44261b70df209f4c91
SHA512fe06193f46f2c114d31076c6fab563f46e10c7a961b3c61b311dcced18c91a282ef30fedd50993e25e7532457336001f93a94604a54e3a55f77845e7146ed012
-
Filesize
370B
MD5b34d3baddf9462c1770d3aeab97a0840
SHA1995835b16dd0f66d12ba41380dce827ff64700d1
SHA2567bb5a14c5e86a9c945a9705f6f5175a97b4247b55451b76cf088988a350572f8
SHA512a029572aafcb7a11829f2451c881ca1783af2c2728bcf6bada3a15263bff9e48f9b4d63bee7c752a6efec58941efb4b7055de275f7b79a944efaab7ccdedc8b3
-
Filesize
327KB
MD5d6c38108d2daaec744aefc990c228d6c
SHA119cfd6056af9529c1257ca62016733a8dfdd7b6a
SHA25682897666d3489c1032c42ee6440645e44b3d850a89dc85a5f8baa28a867e3a8b
SHA512d2b2e00b1f6aaba724fae7a0b06fb02b24780194d193dc82763f15a36a2c84828bc463b6fcef5a5df6ceb4f3ee16a5a71d5083a9767448136f9a5b889c3805ac
-
Filesize
1.4MB
MD508c4ea77bbeacac5c851a3cf8a985d9c
SHA13739f580e97ad52039150252c182a8af1af8577c
SHA2568642346d9bd22296fd7059eba417abf45dac3481c6ebf7c5472b231bd2b5880c
SHA51286a13cc9ec92192e78cce6037e292a549ba48782d7a320e891d302ce834d74e3778e25dee36fc9fcee7333ee4581a4b776a2dd6c64a3a1152d5b5bba43c3d67c
-
Filesize
1.5MB
MD509be773f70ee77ce8120d3db73bfc7e5
SHA13599a404dcf06834ce53c12ffb46be2e5de7e1b8
SHA2564c343cca641ce890684cc5e0be7bc1e4b031912f62d2f95016a34a25a5b0af88
SHA512911e3ea13a190ed99a70243a8b599ab419468c754b07466254b66c3f8adcf512d5c51b86e4d84459e73960e01e6184714a3f817b2e90d7127b0f709fc29ae836
-
Filesize
605KB
MD518920afd13872383f9aa1893fce4a575
SHA174728ded8f77a8db172ddde019575c9c05dd675e
SHA256aa0a585e4b6417669c2e4bad674b2c8c83584645d44c24d88915678c59d569ff
SHA51208c8993d89c104ce80460a447fbbaf302c155444b9a72970e634c62dacfa2b0e12400c480677eaccc6487afd131db3451633db02e4bfc5e3ea8bbc20c458b859
-
Filesize
1.7MB
MD5675aafaa923810cc860f2de701ff2ca4
SHA1bed528630b91d7d888b54a79e9b71c96ddb274b3
SHA256e1cc01316b41d25ecdc1ea41d3f7a7fff3b95b121fba1a75c1e724091478c2b8
SHA5120a3dbd00ea2398d8721a498df8e1ffef96efd1277c1d74ed61100dc26f737ba3d6f08726f7a3d83465d49962ac41a77a99ed80f4f48bf685ccfc10e289bdecc2
-
Filesize
1.5MB
MD5b1f93cb83faaa40271654517c326ee2e
SHA16dc99cf686b2af2f5f7469b2eab727338bc351e9
SHA256f46505ee149e4327c323de832c623ac23b8376544b7891bfd8e30570a4f20858
SHA5126d9fc52ab0a20cdecf4e1ece380b3623979b85a16dcb813ad3b4a8ba287f6048458c477bc1021529e178fb135884d18493b4d0fd1a969b412e7457fa02eff3e1
-
Filesize
83KB
MD53170dfbc38a0bb57382d898386f70ad4
SHA168615290fd840778498a42eaf9d28dc8c93b961d
SHA256e4d5a1842d65e99581e52225e0af6455e078e95b3ea3d3b49f673e4d5168b82d
SHA51269e71251e36e266bb2d1079cbf7a56a4db2efba54dc473eee4db7966af97c29dae977cdd75ea63818b2ac2cec1fb8af6b42b5d36732b9c0e2419fee138dad7ad
-
Filesize
702KB
MD5335e83c746fce622daee2dbeeb2d6220
SHA14d73b362a701fc579d0e786c67e690c6cef2581b
SHA2565566d1e064e096636dd49f10643192d1cae01500e25774a1b4931568daf7c83c
SHA512cda99c70c273e07bcc9e82621d0e2a899f74a5933c78f5b2bd89fc5edca51763b29b403a5077b641820bee32eb840678ed1b0dec505a010e57129cbb8aa41775
-
Filesize
84KB
-
Filesize
84KB
-
Filesize
84KB
-
Filesize
84KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
10.8MB
-
Filesize
28.8MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
56KB
-
Filesize
10.8MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
10.8MB
-
Filesize
200KB
-
Filesize
8.8MB
-
Filesize
28.8MB
-
Filesize
712KB
-
Filesize
64KB
-
Filesize
56KB
-
Filesize
664KB
-
Filesize
10.8MB
-
Filesize
224KB
-
Filesize
64KB
-
Filesize
472KB
-
Filesize
168KB
-
Filesize
10.8MB
-
Filesize
64KB
-
Filesize
208KB
-
Filesize
32KB
-
Filesize
64KB
-
Filesize
24KB
-
Filesize
760KB
-
Filesize
4KB
-
Filesize
760KB
-
Filesize
760KB
-
Filesize
4KB
-
Filesize
760KB