Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
10Static
static
3X2 2021 20...al.zip
windows11-21h2-x64
1X2 2021 Of...Bin.db
windows11-21h2-x64
3X2 2021 Of...in.dll
windows11-21h2-x64
3X2 2021 Of...rm.dll
windows11-21h2-x64
3X2 2021 Of...21.exe
windows11-21h2-x64
1X2 2021 Of...23.exe
windows11-21h2-x64
10X2 2021 Of...2A.exp
windows11-21h2-x64
3X2 2021 Of...2A.lib
windows11-21h2-x64
3X2 2021 Of...2A.pdb
windows11-21h2-x64
3X2 2021 Of...ns.exe
windows11-21h2-x64
1X2 2021 Of...mp.dat
windows11-21h2-x64
3X2 2021 Of...ac.zip
windows11-21h2-x64
1src/MacGyv...et.cap
windows11-21h2-x64
3src/MacGyv...ss.cap
windows11-21h2-x64
3src/MacGyv...ol.cap
windows11-21h2-x64
3src/MacGyv...or.cap
windows11-21h2-x64
3src/MacGyv...ry.cap
windows11-21h2-x64
3src/MacGyv...er.cap
windows11-21h2-x64
3src/MacGyv...rt.cap
windows11-21h2-x64
3src/MacGyv...od.cap
windows11-21h2-x64
3src/MacGyv...on.cap
windows11-21h2-x64
3src/MacGyv...ld.cap
windows11-21h2-x64
3X2 2021 Of...c2.zip
windows11-21h2-x64
1main/javac...et.cap
windows11-21h2-x64
3main/javac...ss.cap
windows11-21h2-x64
3main/javac...ol.cap
windows11-21h2-x64
3main/javac...ug.cap
windows11-21h2-x64
3main/javac...or.cap
windows11-21h2-x64
3main/javac...ry.cap
windows11-21h2-x64
3main/javac...er.cap
windows11-21h2-x64
3X2 2021 Of...e3.dll
windows11-21h2-x64
3X2 2021 Of...b1.dll
windows11-21h2-x64
3Analysis
-
max time kernel
448s -
max time network
1179s -
platform
windows11-21h2_x64 -
resource
win11-20240221-en -
resource tags
arch:x64arch:x86image:win11-20240221-enlocale:en-usos:windows11-21h2-x64system -
submitted
04/04/2024, 20:32
Static task
static1
Behavioral task
behavioral1
Sample
X2 2021 2023 Official.zip
Resource
win11-20240221-en
Behavioral task
behavioral2
Sample
X2 2021 Official/Bin.db
Resource
win11-20240221-en
Behavioral task
behavioral3
Sample
X2 2021 Official/GPPcScConnectionPlugin.dll
Resource
win11-20240214-en
Behavioral task
behavioral4
Sample
X2 2021 Official/GlobalPlatform.dll
Resource
win11-20240221-en
Behavioral task
behavioral5
Sample
X2 2021 Official/X2 2021.exe
Resource
win11-20240221-en
Behavioral task
behavioral6
Sample
X2 2021 Official/X2 2023.exe
Resource
win11-20240221-en
Behavioral task
behavioral7
Sample
X2 2021 Official/X2A.exp
Resource
win11-20240221-en
Behavioral task
behavioral8
Sample
X2 2021 Official/X2A.lib
Resource
win11-20240221-en
Behavioral task
behavioral9
Sample
X2 2021 Official/X2A.pdb
Resource
win11-20240221-en
Behavioral task
behavioral10
Sample
X2 2021 Official/bins.exe
Resource
win11-20240214-en
Behavioral task
behavioral11
Sample
X2 2021 Official/cardtemp.dat
Resource
win11-20240221-en
Behavioral task
behavioral12
Sample
X2 2021 Official/mac.zip
Resource
win11-20240221-en
Behavioral task
behavioral13
Sample
src/MacGyver/javacard/Applet.cap
Resource
win11-20240221-en
Behavioral task
behavioral14
Sample
src/MacGyver/javacard/Class.cap
Resource
win11-20240221-en
Behavioral task
behavioral15
Sample
src/MacGyver/javacard/ConstantPool.cap
Resource
win11-20240221-en
Behavioral task
behavioral16
Sample
src/MacGyver/javacard/Descriptor.cap
Resource
win11-20240221-en
Behavioral task
behavioral17
Sample
src/MacGyver/javacard/Directory.cap
Resource
win11-20240221-en
Behavioral task
behavioral18
Sample
src/MacGyver/javacard/Header.cap
Resource
win11-20240221-en
Behavioral task
behavioral19
Sample
src/MacGyver/javacard/Import.cap
Resource
win11-20240214-en
Behavioral task
behavioral20
Sample
src/MacGyver/javacard/Method.cap
Resource
win11-20240221-en
Behavioral task
behavioral21
Sample
src/MacGyver/javacard/RefLocation.cap
Resource
win11-20240221-en
Behavioral task
behavioral22
Sample
src/MacGyver/javacard/StaticField.cap
Resource
win11-20240319-en
Behavioral task
behavioral23
Sample
X2 2021 Official/mac2.zip
Resource
win11-20240221-en
Behavioral task
behavioral24
Sample
main/javacard/Applet.cap
Resource
win11-20240221-en
Behavioral task
behavioral25
Sample
main/javacard/Class.cap
Resource
win11-20240221-en
Behavioral task
behavioral26
Sample
main/javacard/ConstantPool.cap
Resource
win11-20240221-en
Behavioral task
behavioral27
Sample
main/javacard/Debug.cap
Resource
win11-20240221-en
Behavioral task
behavioral28
Sample
main/javacard/Descriptor.cap
Resource
win11-20240221-en
Behavioral task
behavioral29
Sample
main/javacard/Directory.cap
Resource
win11-20240221-en
Behavioral task
behavioral30
Sample
main/javacard/Header.cap
Resource
win11-20240221-en
Behavioral task
behavioral31
Sample
X2 2021 Official/sqlite3.dll
Resource
win11-20240221-en
Behavioral task
behavioral32
Sample
X2 2021 Official/zlib1.dll
Resource
win11-20240221-en
General
-
Target
X2 2021 Official/X2A.pdb
-
Size
5.6MB
-
MD5
ee17c6d9c85a2e47e75ef25e3f574f5b
-
SHA1
d68c8efd824aa307170cd0b1ea806a9ff52bbdb2
-
SHA256
c972c60aa8a1d500595312541efd544d378477428cd49f7ab2277460b7ea40bb
-
SHA512
69ad02a25149654a1bb9e60de32ac252a2d3cb6f7866056e0137bb03a45d5bdf1afdd5c748fcc48d6f70ba93dbdfe2c97556d38f99df6bbeb3022578940d445a
-
SSDEEP
49152:+9awQE0nPazC1CMQg60647XZ1lD0fALKpLFuygh0D3ETvL80loR1EE9r6swpZB7d:KX3UoRmE9r6swt1b1jdR
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-627134735-902745853-4257352768-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-627134735-902745853-4257352768-1000_Classes\Local Settings OpenWith.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1772 OpenWith.exe