Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
7Static
static
3Studio One Keygen.exe
windows7-x64
7Studio One Keygen.exe
windows10-2004-x64
7$TEMP/BASSMOD.dll
windows7-x64
1$TEMP/BASSMOD.dll
windows10-2004-x64
1$TEMP/R2RS1KG2.dll
windows7-x64
1$TEMP/R2RS1KG2.dll
windows10-2004-x64
3$TEMP/keygen.exe
windows7-x64
1$TEMP/keygen.exe
windows10-2004-x64
1Analysis
-
max time kernel
140s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
05/04/2024, 07:27
Static task
static1
Behavioral task
behavioral1
Sample
Studio One Keygen.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Studio One Keygen.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
$TEMP/BASSMOD.dll
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
$TEMP/BASSMOD.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
$TEMP/R2RS1KG2.dll
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
$TEMP/R2RS1KG2.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
$TEMP/keygen.exe
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
$TEMP/keygen.exe
Resource
win10v2004-20240226-en
General
-
Target
$TEMP/keygen.exe
-
Size
583KB
-
MD5
1b9a74d3cc46f9ee0d453cafc565ee56
-
SHA1
c1bf1898738a6b18c45a929de19cf4356666c273
-
SHA256
495a29f5092924fcb86fd47f2ece35fab64f3f9ca20fb12b42b33946c2a053e1
-
SHA512
cd57f0088ab58afa37b9cbec61da854db93bd79e7475a35f783e73f527917260eb78768ad3bed47998b1a892aa0d3bff78dc6a1915ab0024393ea0d0a4a2ac9f
-
SSDEEP
6144:pcmzikEPDonRgNgz1+hw6hNgPfHv9PAimIAOtEoG7CYxniJODg+D:pc/kEPDonR6Y436vR4W6g+D
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: 33 1984 AUDIODG.EXE Token: SeIncBasePriorityPrivilege 1984 AUDIODG.EXE