Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
7Static
static
3fb2kp_0943b70515.exe
windows7-x64
7fb2kp_0943b70515.exe
windows10-2004-x64
7components...bx.dll
windows7-x64
1components...bx.dll
windows10-2004-x64
1components...c3.dll
windows7-x64
1components...c3.dll
windows10-2004-x64
1components...st.dll
windows7-x64
1components...st.dll
windows10-2004-x64
1components...da.dll
windows7-x64
1components...da.dll
windows10-2004-x64
1components...on.dll
windows7-x64
1components...on.dll
windows10-2004-x64
1components...te.dll
windows7-x64
1components...te.dll
windows10-2004-x64
1components...op.dll
windows7-x64
1components...op.dll
windows10-2004-x64
1components...rc.dll
windows7-x64
1components...rc.dll
windows10-2004-x64
1components...mb.dll
windows7-x64
1components...mb.dll
windows10-2004-x64
1components...b2.dll
windows7-x64
1components...b2.dll
windows10-2004-x64
1components...ox.dll
windows7-x64
1components...ox.dll
windows10-2004-x64
1components...ey.dll
windows7-x64
1components...ey.dll
windows10-2004-x64
1components...ag.dll
windows7-x64
1components...ag.dll
windows10-2004-x64
1components...di.dll
windows7-x64
1components...di.dll
windows10-2004-x64
1components...ks.dll
windows7-x64
1components...ks.dll
windows10-2004-x64
1Analysis
-
max time kernel
121s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
16/04/2024, 00:13
Static task
static1
Behavioral task
behavioral1
Sample
fb2kp_0943b70515.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fb2kp_0943b70515.exe
Resource
win10v2004-20240412-en
Behavioral task
behavioral3
Sample
components/foo_abx.dll
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
components/foo_abx.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral5
Sample
components/foo_ac3.dll
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
components/foo_ac3.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral7
Sample
components/foo_albumlist.dll
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
components/foo_albumlist.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral9
Sample
components/foo_cdda.dll
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
components/foo_cdda.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral11
Sample
components/foo_codepage_action.dll
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
components/foo_codepage_action.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral13
Sample
components/foo_delete.dll
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
components/foo_delete.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral15
Sample
components/foo_dop.dll
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
components/foo_dop.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral17
Sample
components/foo_dsp_ssrc.dll
Resource
win7-20240221-en
Behavioral task
behavioral18
Sample
components/foo_dsp_ssrc.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral19
Sample
components/foo_dumb.dll
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
components/foo_dumb.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral21
Sample
components/foo_freedb2.dll
Resource
win7-20240221-en
Behavioral task
behavioral22
Sample
components/foo_freedb2.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral23
Sample
components/foo_infobox.dll
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
components/foo_infobox.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral25
Sample
components/foo_input_monkey.dll
Resource
win7-20240319-en
Behavioral task
behavioral26
Sample
components/foo_input_monkey.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral27
Sample
components/foo_masstag.dll
Resource
win7-20240221-en
Behavioral task
behavioral28
Sample
components/foo_masstag.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral29
Sample
components/foo_midi.dll
Resource
win7-20240215-en
Behavioral task
behavioral30
Sample
components/foo_midi.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral31
Sample
components/foo_out_ks.dll
Resource
win7-20240221-en
Behavioral task
behavioral32
Sample
components/foo_out_ks.dll
Resource
win10v2004-20240412-en
General
-
Target
fb2kp_0943b70515.exe
-
Size
4.1MB
-
MD5
509ff3f3f90759f6ad5b1c1c82a74948
-
SHA1
8d7add5a90904670a96c2ef17841cbf45bdf6a6a
-
SHA256
fe57bc9031e150c8076bdcb59d8f93e9f2b7daeb34f366efe82cc15b250185f1
-
SHA512
9620292a8bb3409c1e7175270cf1e5f262853472f841b08064da6a28c553f18dc949be99b7325a290676d7ab71af267a0f25335472f603f51554b3a4b0756cc1
-
SSDEEP
98304:ixROaWeOVYMW0YHmWS/VFO3rK6cw6EH7KM/U4UUr6EBqHaD2e8dQv:iseOsNmWUVFObKZVgRUUrLQg2q
Malware Config
Signatures
-
Loads dropped DLL 3 IoCs
pid Process 1964 fb2kp_0943b70515.exe 1964 fb2kp_0943b70515.exe 1964 fb2kp_0943b70515.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1964 fb2kp_0943b70515.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
789B
MD540cd7696610a67e5d22bd1f3e2562470
SHA17eca375b241b73406615ef742f665a6b700871f8
SHA25603d3155c09d2dc57e5ee1caba2acb1e399b1e176b34fd02c053e554d2a2f54a5
SHA5127db5c1f5ea9872d419ee645057a7421c129430389c3991c039695ccf2c161cff1a568a07d4ba7c939f309ad13dabf4463b76da24c6c7641d8810668c3cde790c
-
Filesize
828B
MD5cecb6c2745c8cbc7f988a1f4bf2feebe
SHA11d02203ee38d366dfbe5d27f659fb435ddb4ecfd
SHA256d02a36758148b89cdbf2e4926c69935b75351cc945380b23afd83c32cb6d1713
SHA512762ad208237440ca24ba48598d86573e9956e2ec56b59540fde9439f8b0702c4c2f4236c32d066544f661ced59f9fe843f1cd5669858ebce4ebe3d1fb804da5b
-
Filesize
12KB
MD5cce5450725a9429a1d3c7aa851d40e8d
SHA105722500e42757ac03f2558452a064b906e31937
SHA256d850c786a68df9520a3ecf2a96f4f091c9bae71d3adbf7731e8c172533cb266d
SHA5123ddb56429e097ecf942e8a5147ba4c4191c52b736df267934f0dca75ffa74faffee8911dda47c5d2542f91138abbcaf61be3e3d68b368631d6bc21e254b5c637
-
Filesize
5KB
MD5759cb1f693d002203d8a154ec37bc1a8
SHA13a6c278f27fd098105b9d8d0aff775b55bdaa1db
SHA2564c70ae970cbf32b1891cac05897b08cf5397554ab06968db0143ddd26676e574
SHA5129ae52f73f861b252585ad4660353339c4daefb8981bd280200e6ace65e3a3835d617f6d4de9037c1fb912a2e4a4e2711b44a494b5c47c4a43bfa18f836604836
-
Filesize
10KB
MD524a04541a0d2312e472f8236fd205ea8
SHA1c47eeee6fc23590311f2860d80baa954386a8ce9
SHA25674d7ac9e94305c3d30cfc19279ee73fa891bd5ae8800610dee391d1880825e19
SHA51265e061d2776bc0db53ea8aa35fb50152818c74fa9735f1a5a370315c4dacaf2cb79374ec59174d86c2e87f5b0bb8662f8cee6ff97ae93261c9a9a05bd3cc1adf