Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
7Static
static
3PrimoCache....0.exe
windows7-x64
7PrimoCache....0.exe
windows10-2004-x64
7PrimoCache...or.exe
windows7-x64
1PrimoCache...or.exe
windows10-2004-x64
1PrimoCache...cv.sys
windows10-2004-x64
1PrimoCache...cv.sys
windows10-2004-x64
1PrimoCache...cv.sys
windows10-2004-x64
1PrimoCache...cv.sys
windows10-2004-x64
1PrimoCache...ll.bat
windows7-x64
1PrimoCache...ll.bat
windows10-2004-x64
1Analysis
-
max time kernel
148s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
26/05/2024, 16:54
Static task
static1
Behavioral task
behavioral1
Sample
PrimoCache/PrimoCache_Srv_Setup_4.3.0.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
PrimoCache/PrimoCache_Srv_Setup_4.3.0.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral3
Sample
PrimoCache/reg/CmdColor.exe
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
PrimoCache/reg/CmdColor.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
PrimoCache/reg/drv.bak/win10-11_srv2016-2022/rxfcv.sys
Resource
win10v2004-20240426-en
Behavioral task
behavioral6
Sample
PrimoCache/reg/drv.bak/win7-8.1_srv2008-2012/rxfcv.sys
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
PrimoCache/reg/drv10/rxfcv.sys
Resource
win10v2004-20240508-en
Behavioral task
behavioral8
Sample
PrimoCache/reg/drv7/rxfcv.sys
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
PrimoCache/reg/install.bat
Resource
win7-20240419-en
Behavioral task
behavioral10
Sample
PrimoCache/reg/install.bat
Resource
win10v2004-20240508-en
General
-
Target
PrimoCache/reg/drv.bak/win7-8.1_srv2008-2012/rxfcv.sys
-
Size
200KB
-
MD5
f834c1bc19620d2b8bf580e9c6ae09ff
-
SHA1
0ebfa5a36545d4b3c11bbd174ceb4ba5531099b6
-
SHA256
28c88793e56daa5485f29f113067da7be7cd0fb8fdff53b90c104f5b2bfb38bf
-
SHA512
1f36feae302c0f84f66075033809e7577e804cb71db94ed97739a5645e21e1f3464f4be3498cbfd0ee4e2eac20051105f039c787d4b16abb40339c079770cd47
-
SSDEEP
3072:MdRr4yLesbdhK15nv8YrQGCgWuJazDFMFHq+zAlddMunTaLQ94X05Y:SHeQdhe5vLSFgHP0ldiLQ94ke
Malware Config
Signatures
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\PrimoCache\reg\drv.bak\win7-8.1_srv2008-2012\rxfcv.sys1⤵PID:2004
-
C:\Users\Admin\AppData\Local\Temp\PrimoCache\reg\drv.bak\win7-8.1_srv2008-2012\rxfcv.sysC:\Users\Admin\AppData\Local\Temp\PrimoCache\reg\drv.bak\win7-8.1_srv2008-2012\rxfcv.sys2⤵PID:3888
-