Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
7Static
static
3CrashReporter.NET.dll
windows7-x64
1CrashReporter.NET.dll
windows10-2004-x64
1DiscordRPC.dll
windows7-x64
1DiscordRPC.dll
windows10-2004-x64
1DotNetProj...ge.dll
windows7-x64
1DotNetProj...ge.dll
windows10-2004-x64
1Dragablz.dll
windows7-x64
1Dragablz.dll
windows10-2004-x64
1Jupiter.dll
windows7-x64
1Jupiter.dll
windows10-2004-x64
1MaterialDe...rs.dll
windows7-x64
1MaterialDe...rs.dll
windows10-2004-x64
1MaterialDe...pf.dll
windows7-x64
1MaterialDe...pf.dll
windows10-2004-x64
1Memory.dll
windows7-x64
1Memory.dll
windows10-2004-x64
1Newtonsoft.Json.dll
windows7-x64
1Newtonsoft.Json.dll
windows10-2004-x64
1OctoSniff.exe
windows7-x64
6OctoSniff.exe
windows10-2004-x64
6OctoSniffo.exe
windows7-x64
1OctoSniffo.exe
windows10-2004-x64
1PLEASE_INS...ap.exe
windows7-x64
7PLEASE_INS...ap.exe
windows10-2004-x64
3$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$SYSDIR/Packet.dll
windows7-x64
1$SYSDIR/Packet.dll
windows10-2004-x64
1$SYSDIR/pthreadVC.dll
windows7-x64
1$SYSDIR/pthreadVC.dll
windows10-2004-x64
1$SYSDIR/wpcap.dll
windows7-x64
1$SYSDIR/wpcap.dll
windows10-2004-x64
1Analysis
-
max time kernel
140s -
max time network
158s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
30/03/2024, 07:12
Static task
static1
Behavioral task
behavioral1
Sample
CrashReporter.NET.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
CrashReporter.NET.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
DiscordRPC.dll
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
DiscordRPC.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
DotNetProjects.SVGImage.dll
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
DotNetProjects.SVGImage.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
Dragablz.dll
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
Dragablz.dll
Resource
win10v2004-20240319-en
Behavioral task
behavioral9
Sample
Jupiter.dll
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
Jupiter.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
MaterialDesignColors.dll
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
MaterialDesignColors.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral13
Sample
MaterialDesignThemes.Wpf.dll
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
MaterialDesignThemes.Wpf.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral15
Sample
Memory.dll
Resource
win7-20240220-en
Behavioral task
behavioral16
Sample
Memory.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral17
Sample
Newtonsoft.Json.dll
Resource
win7-20240221-en
Behavioral task
behavioral18
Sample
Newtonsoft.Json.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral19
Sample
OctoSniff.exe
Resource
win7-20240319-en
Behavioral task
behavioral20
Sample
OctoSniff.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral21
Sample
OctoSniffo.exe
Resource
win7-20240221-en
Behavioral task
behavioral22
Sample
OctoSniffo.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral23
Sample
PLEASE_INSTALL_ME_FIRST.winpcap.exe
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
PLEASE_INSTALL_ME_FIRST.winpcap.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral25
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20231129-en
Behavioral task
behavioral26
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral27
Sample
$SYSDIR/Packet.dll
Resource
win7-20240221-en
Behavioral task
behavioral28
Sample
$SYSDIR/Packet.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral29
Sample
$SYSDIR/pthreadVC.dll
Resource
win7-20240221-en
Behavioral task
behavioral30
Sample
$SYSDIR/pthreadVC.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral31
Sample
$SYSDIR/wpcap.dll
Resource
win7-20240221-en
Behavioral task
behavioral32
Sample
$SYSDIR/wpcap.dll
Resource
win10v2004-20240226-en
General
-
Target
DiscordRPC.dll
-
Size
79KB
-
MD5
ad463f573775c43a561ade842c41b0e8
-
SHA1
e70e10a18a3ae85cd1ca9be66a7bb46d99ccccd3
-
SHA256
6a18dfc8bdc6030787b5814c76b8663dbe5b8ca469beb65a2ca9f5731fa1906f
-
SHA512
0c790e70150148f4cc516cc9abcdf42a5b28a0785a61cd02ab7d59776df25eaeea287c98522d4b3271cae8bf35f98d91049c6474e81cc2745dc32a808832efe0
-
SSDEEP
768:Jp+8VvNVQPCNRRUzpEqrK0V2Yct83YVhEbqoL/wDIijcJRM2S0B+mhx9HS4i6E4m:nVvNGP6U1bwueoRPMVo+mhxVS4i60
Malware Config
Signatures
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\DiscordRPC.dll,#11⤵PID:3620
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=1416 --field-trial-handle=3240,i,13319578961094268484,16557498665191861597,262144 --variations-seed-version /prefetch:81⤵PID:4728