Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

4

Static

static

3

TRANSCEND-...ir.exe

windows7-x64

3

TRANSCEND-...ir.exe

windows10-2004-x64

3

TRANSCEND-...er.doc

windows7-x64

4

TRANSCEND-...er.doc

windows10-2004-x64

1

TRANSCEND-...02.exe

windows7-x64

1

TRANSCEND-...02.exe

windows10-2004-x64

1

TRANSCEND-...ub.exe

windows7-x64

1

TRANSCEND-...ub.exe

windows10-2004-x64

1

TRANSCEND-...v3.exe

windows7-x64

4

TRANSCEND-...v3.exe

windows10-2004-x64

4

TRANSCEND-...v4.exe

windows7-x64

4

TRANSCEND-...v4.exe

windows10-2004-x64

4

TRANSCEND-...28.exe

windows7-x64

4

TRANSCEND-...28.exe

windows10-2004-x64

4

TRANSCEND-...04.exe

windows7-x64

4

TRANSCEND-...04.exe

windows10-2004-x64

4

Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    16/05/2024, 15:55

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630/sm32Xtest_V2.03.32_v4.exe

  • Size

    1.9MB

  • MD5

    c2caab38c7ad349fa18b08e2e135b918

  • SHA1

    89c839666208f3b90d6d4dff9fdb32b578f91fa0

  • SHA256

    ffe8c13ba865969bf118b37d019a2bd4ddf2e5327bcddba4484560296bf3fbbe

  • SHA512

    7b4392b55a96744e5e93264226ae0eaff400e9694d90bfdcf1a3306ab9f8d9d510d3864c6a0402b001640a08a8697bbd41d4f6f3ce777377d4a7921ea7ef8c44

  • SSDEEP

    24576:n03XBEMI12ziUSULTzn1HhzCL89Ys1RPo5oQzPDNyYdZfmU4GY38CJ45eoeAUfX0:OOMI2fj1HRCgToiQjJpyMkPK0boxt

Score
4/10

Malware Config

Signatures

  • Drops file in Windows directory 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630\sm32Xtest_V2.03.32_v4.exe
    "C:\Users\Admin\AppData\Local\Temp\TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630\sm32Xtest_V2.03.32_v4.exe"
    1⤵
    • Drops file in Windows directory
    • Suspicious use of SetWindowsHookEx
    PID:1912

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630\UFD_MP\MSusbHub.cfg
    Filesize

    767B

    MD5

    fcc520e3ca03a316e17300a3d919186c

    SHA1

    e45dea574cc19f742c2ee8621f527fe8f7cb698d

    SHA256

    b9b9e8dddae07588fc800cdf659ae9d9e4b9c054c2f195e6fe4d960f8a5a6af3

    SHA512

    a717357f5a0440e88e5a960c47c6c0af861a94eb6ea76965b8955100e6c7806c8debf18a6b726b884fc966459f5d43fe88c4f5a1ef4a77b53f4c6b93fa53bdaa

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630\UFD_MP\Setting.set
    Filesize

    35B

    MD5

    bc589549bae17eab17375cef6e62abbd

    SHA1

    dc6700647a84d0af21b3bbac98a902b7f9ec5edb

    SHA256

    8fb3199c7cc03b7d5f456364045407857473b926990bc2044d1dfe4c8d2244cb

    SHA512

    41451014552f1abc56ae414c9bbb75a970e5ae6684dbecac8deebddbc4d6b207bda3f828f18167d31fa37ffe5a0dae28d4b4459f91d3186854192cf18bc77c5f

    Download Submit