Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

4

Static

static

3

TRANSCEND-...ir.exe

windows7-x64

3

TRANSCEND-...ir.exe

windows10-2004-x64

3

TRANSCEND-...er.doc

windows7-x64

4

TRANSCEND-...er.doc

windows10-2004-x64

1

TRANSCEND-...02.exe

windows7-x64

1

TRANSCEND-...02.exe

windows10-2004-x64

1

TRANSCEND-...ub.exe

windows7-x64

1

TRANSCEND-...ub.exe

windows10-2004-x64

1

TRANSCEND-...v3.exe

windows7-x64

4

TRANSCEND-...v3.exe

windows10-2004-x64

4

TRANSCEND-...v4.exe

windows7-x64

4

TRANSCEND-...v4.exe

windows10-2004-x64

4

TRANSCEND-...28.exe

windows7-x64

4

TRANSCEND-...28.exe

windows10-2004-x64

4

TRANSCEND-...04.exe

windows7-x64

4

TRANSCEND-...04.exe

windows10-2004-x64

4

Analysis

  • max time kernel
    120s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    16/05/2024, 15:55

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630/sm32Xtest_V2.03.50_v5_K0928.exe

  • Size

    2.1MB

  • MD5

    31b659e1bd7806be119c01117eee0b21

  • SHA1

    9c3e74fd7bf4a3200aa0859d5d0dadc5637948cb

  • SHA256

    89f44007912dee30e9c56587d4863ad66e45c7e8b0f26902c1e63ed3d0a02710

  • SHA512

    e4911f384557ca5084eb38f4939ecc90a9955e6c3383dcf9344093618c19f050c2b3367d347baba8a712dc21769bea5189aae5ee6b9b4326c1cb75b298f44559

  • SSDEEP

    24576:fN5MOBKqTbsvt6Yj88peFZ+cK8GEhf+aGOGDqD5E7aaXUJo/wi0DPOPCR2oo0UnI:NBZbsvgYwu2tqdeqrCm0Unrxixt

Score
4/10

Malware Config

Signatures

  • Drops file in Windows directory 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630\sm32Xtest_V2.03.50_v5_K0928.exe
    "C:\Users\Admin\AppData\Local\Temp\TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630\sm32Xtest_V2.03.50_v5_K0928.exe"
    1⤵
    • Drops file in Windows directory
    • Suspicious use of SetWindowsHookEx
    PID:1644

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630\UFD_MP\MSusbHub.cfg
    Filesize

    767B

    MD5

    fcc520e3ca03a316e17300a3d919186c

    SHA1

    e45dea574cc19f742c2ee8621f527fe8f7cb698d

    SHA256

    b9b9e8dddae07588fc800cdf659ae9d9e4b9c054c2f195e6fe4d960f8a5a6af3

    SHA512

    a717357f5a0440e88e5a960c47c6c0af861a94eb6ea76965b8955100e6c7806c8debf18a6b726b884fc966459f5d43fe88c4f5a1ef4a77b53f4c6b93fa53bdaa

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630\UFD_MP\Setting.set
    Filesize

    35B

    MD5

    bc589549bae17eab17375cef6e62abbd

    SHA1

    dc6700647a84d0af21b3bbac98a902b7f9ec5edb

    SHA256

    8fb3199c7cc03b7d5f456364045407857473b926990bc2044d1dfe4c8d2244cb

    SHA512

    41451014552f1abc56ae414c9bbb75a970e5ae6684dbecac8deebddbc4d6b207bda3f828f18167d31fa37ffe5a0dae28d4b4459f91d3186854192cf18bc77c5f

    Download Submit