Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
7Static
static
3AimmyLauncher.exe
windows10-2004-x64
7DirectML.dll
windows10-2004-x64
1TotallyNotAimmyV2.exe
windows10-2004-x64
1TotallyNotAimmyV2.exe
windows10-2004-x64
1onnxruntime.dll
windows10-2004-x64
1runtimes/w...me.dll
windows10-2004-x64
1runtimes/w...me.dll
windows10-2004-x64
1runtimes/w...me.dll
windows10-2004-x64
1runtimes/w...nt.dll
windows10-2004-x64
1Analysis
-
max time kernel
1766s -
max time network
1803s -
platform
windows10-2004_x64 -
resource
win10v2004-20240412-en -
resource tags
arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system -
submitted
25/04/2024, 20:47
Static task
static1
Behavioral task
behavioral1
Sample
AimmyLauncher.exe
Resource
win10v2004-20240412-en
Behavioral task
behavioral2
Sample
DirectML.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral3
Sample
TotallyNotAimmyV2.exe
Resource
win10v2004-20240412-en
Behavioral task
behavioral4
Sample
TotallyNotAimmyV2.exe
Resource
win10v2004-20240412-en
Behavioral task
behavioral5
Sample
onnxruntime.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral6
Sample
runtimes/win-arm64/native/onnxruntime.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral7
Sample
runtimes/win-x64/native/onnxruntime.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral8
Sample
runtimes/win-x86/native/onnxruntime.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral9
Sample
runtimes/win/lib/net8.0/System.Management.dll
Resource
win10v2004-20240412-en
General
-
Target
TotallyNotAimmyV2.exe
-
Size
139KB
-
MD5
3d729e9b4df34ddb7ddafe78a01b71eb
-
SHA1
2f01d3349288f33a5e50c1d779b27ea65f753249
-
SHA256
b48997a06687cbe6dadae5ab45884feadd5921f5fe6f79df810c492557669406
-
SHA512
bb476a263e2f29628801826c4f5869424133f26921262a98d399240cc6701519ad7337875adb2fa37f7dec122ec832195d0ea6216022646f61fc735528be5875
-
SSDEEP
3072:ZiS4omp03WQthI/US3BZC0EiRQ1G78IVn2tbSkcJB8ltt:ZiS4ompBUS3BZC0C1G78IVEcnct
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 4384 TotallyNotAimmyV2.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 4384 TotallyNotAimmyV2.exe 4384 TotallyNotAimmyV2.exe