Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

17/05/2024, 13:42

240517-qzpdhaah86 3

17/05/2024, 13:36

240517-qwpvvsah46 3

17/05/2024, 13:05

240517-qby8ssad78 10

Analysis

  • max time kernel
    1768s
  • max time network
    1802s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    17/05/2024, 13:42

General

  • Target

    TradingView_Premium_(password_github)/GAC_MSIL/MMCEx/3.0.0.0__31bf3856ad364e35/MMCEx.dll

  • Size

    412KB

  • MD5

    ba4b7414b3b00ac9d751fa78fb5e0228

  • SHA1

    77a87ca3a621107c31540d9290ab7cb654ef5be8

  • SHA256

    3b25659c7f223433b8032743b5279d44ccfebacd324430ea34f831c2b6d6d25a

  • SHA512

    af510fec8e736025d47800407bebd5c0bf34ec8d790ed80624e316bfdf07acc972b1fdf722c207290264004fae2f2a2c2beb50014ffbdbdd1c4bcaf6113ab222

  • SSDEEP

    6144:fjoY5OH9Lrsx3M9LHaNOZZZZtJtVJYOmNVm1NaTjMjaar3yPxFzYXRa8H9:fjoAqLrsqVaN6/iQATjMx3czYXRR

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\TradingView_Premium_(password_github)\GAC_MSIL\MMCEx\3.0.0.0__31bf3856ad364e35\MMCEx.dll,#1
    1⤵
      PID:4820
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=4220 --field-trial-handle=2284,i,9807419199535700662,2319175108930815708,262144 --variations-seed-version /prefetch:8
      1⤵
        PID:3088
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=3992 --field-trial-handle=2284,i,9807419199535700662,2319175108930815708,262144 --variations-seed-version /prefetch:8
        1⤵
          PID:5072

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads