Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

7

Photoshop.exe

windows7-x64

7

Photoshop.exe

windows10-2004-x64

7

$PLUGINSDI...ol.dll

windows7-x64

7

$PLUGINSDI...ol.dll

windows10-2004-x64

7

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

7

$PLUGINSDI...em.dll

windows10-2004-x64

7

$PLUGINSDI...te.dll

windows7-x64

8

$PLUGINSDI...te.dll

windows10-2004-x64

3

$PLUGINSDI...sh.dll

windows7-x64

7

$PLUGINSDI...sh.dll

windows10-2004-x64

7

$PLUGINSDI...ry.dll

windows7-x64

3

$PLUGINSDI...ry.dll

windows10-2004-x64

3

$PLUGINSDIR/xml.dll

windows7-x64

7

$PLUGINSDIR/xml.dll

windows10-2004-x64

7

Analysis

  • max time kernel
    118s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    19/03/2024, 03:07

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Photoshop.exe

  • Size

    194KB

  • MD5

    bbb7c7f58d03d5758c43ad3f9ca344fb

  • SHA1

    41c7a5b247f3eb885ce47fff042baa898741e4de

  • SHA256

    f9e41fe0854e1d2cba512b09924e117b044f23232e621b02e762a0988b044636

  • SHA512

    3eeb0429249c31e9f2523e467a4d58d087eba521f598eb0883b5189421af47d0962ed191701f99e62b958e15d7e9d02e0a3bde99527493306c16a3beb5b608e1

  • SSDEEP

    3072:yweqOYEUXPnpQIQQQJQDb+y56XwQWSGmtE0GJZfwdl4gCr8jfmq/A+y9D427:PEUXunbGz4d/CYSq/Xm

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • Loads dropped DLL 1 IoCs
  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

Processes

  • C:\Users\Admin\AppData\Local\Temp\Photoshop.exe
    "C:\Users\Admin\AppData\Local\Temp\Photoshop.exe"
    1⤵
    • Loads dropped DLL
    PID:2180

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\Temp\nsi2F9A.tmp\System.dll
    Filesize

    7KB

    MD5

    8b06f277ae47f0d2e1c7098a5657ee88

    SHA1

    e3802a6f3949b6c8cd058d840b8776ebf587eed2

    SHA256

    ddccebbf499672af3a74be6fb838b804a66679f7689dde137c39f4e0df1be11d

    SHA512

    6bb68bd7ce5577ba6460ba2eb11536703d0472ba6f91f2fd9b2ec93128cc2700a426217b1029380a8b98cb823b67959d73edd99b3c3812532530aeae0d928060

    Download Submit

  • memory/2180-6-0x00000000748A0000-0x00000000748A9000-memory.dmp

    Filesize

    36KB

    Download