Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
5Static
static
3AddOn/Main...On.dll
windows10-2004-x64
1Documents/KxRun.exe
windows10-2004-x64
3Documents/...DE.pdf
windows10-2004-x64
1Documents/...EN.pdf
windows10-2004-x64
1Documents/...ES.pdf
windows10-2004-x64
1Documents/...FR.pdf
windows10-2004-x64
1Documents/...IT.pdf
windows10-2004-x64
1Documents/...JA.pdf
windows10-2004-x64
1Documents/...NL.pdf
windows10-2004-x64
1Documents/...PT.pdf
windows10-2004-x64
1Documents/...RU.pdf
windows10-2004-x64
1KMNV.dll
windows10-2004-x64
1KNV LA/License_DE.rtf
windows10-2004-x64
1KNV LA/License_EN.rtf
windows10-2004-x64
1KNV LA/License_ES.rtf
windows10-2004-x64
1KNV LA/License_FR.rtf
windows10-2004-x64
1KNV LA/License_IT.rtf
windows10-2004-x64
1KNV LA/License_JA.rtf
windows10-2004-x64
1KNV LA/License_KO.rtf
windows10-2004-x64
1KNV LA/License_NL.rtf
windows10-2004-x64
1KNV LA/Lic...BR.rtf
windows10-2004-x64
1KNV LA/License_RU.rtf
windows10-2004-x64
1KNV LA/Lic...CH.rtf
windows10-2004-x64
1KNV LA/Lic...CH.rtf
windows10-2004-x64
1KNV/Netviewer.exe
windows10-2004-x64
3KmInst32.exe
windows10-2004-x64
1KmInst64.exe
windows10-2004-x64
1KmInstall.exe
windows10-2004-x64
5Readme.html
windows10-2004-x64
1Readme_j.html
windows10-2004-x64
1Setup.exe
windows10-2004-x64
1support/Setup.exe
windows10-2004-x64
5Analysis
-
max time kernel
449s -
max time network
453s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system -
submitted
03/06/2024, 18:16
Behavioral task
behavioral1
Sample
AddOn/MainTargetAddOn.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral2
Sample
Documents/KxRun.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
Documents/Net Viewer User Guide DE.pdf
Resource
win10v2004-20240426-en
Behavioral task
behavioral4
Sample
Documents/Net Viewer User Guide EN.pdf
Resource
win10v2004-20240426-en
Behavioral task
behavioral5
Sample
Documents/Net Viewer User Guide ES.pdf
Resource
win10v2004-20240426-en
Behavioral task
behavioral6
Sample
Documents/Net Viewer User Guide FR.pdf
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
Documents/Net Viewer User Guide IT.pdf
Resource
win10v2004-20240426-en
Behavioral task
behavioral8
Sample
Documents/Net Viewer User Guide JA.pdf
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
Documents/Net Viewer User Guide NL.pdf
Resource
win10v2004-20240426-en
Behavioral task
behavioral10
Sample
Documents/Net Viewer User Guide PT.pdf
Resource
win10v2004-20240426-en
Behavioral task
behavioral11
Sample
Documents/Net Viewer User Guide RU.pdf
Resource
win10v2004-20240426-en
Behavioral task
behavioral12
Sample
KMNV.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral13
Sample
KNV LA/License_DE.rtf
Resource
win10v2004-20240426-en
Behavioral task
behavioral14
Sample
KNV LA/License_EN.rtf
Resource
win10v2004-20240426-en
Behavioral task
behavioral15
Sample
KNV LA/License_ES.rtf
Resource
win10v2004-20240508-en
Behavioral task
behavioral16
Sample
KNV LA/License_FR.rtf
Resource
win10v2004-20240508-en
Behavioral task
behavioral17
Sample
KNV LA/License_IT.rtf
Resource
win10v2004-20240508-en
Behavioral task
behavioral18
Sample
KNV LA/License_JA.rtf
Resource
win10v2004-20240426-en
Behavioral task
behavioral19
Sample
KNV LA/License_KO.rtf
Resource
win10v2004-20240426-en
Behavioral task
behavioral20
Sample
KNV LA/License_NL.rtf
Resource
win10v2004-20240426-en
Behavioral task
behavioral21
Sample
KNV LA/License_PT-BR.rtf
Resource
win10v2004-20240426-en
Behavioral task
behavioral22
Sample
KNV LA/License_RU.rtf
Resource
win10v2004-20240426-en
Behavioral task
behavioral23
Sample
KNV LA/License_SCH.rtf
Resource
win10v2004-20240508-en
Behavioral task
behavioral24
Sample
KNV LA/License_TCH.rtf
Resource
win10v2004-20240508-en
Behavioral task
behavioral25
Sample
KNV/Netviewer.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral26
Sample
KmInst32.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral27
Sample
KmInst64.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral28
Sample
KmInstall.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral29
Sample
Readme.html
Resource
win10v2004-20240508-en
Behavioral task
behavioral30
Sample
Readme_j.html
Resource
win10v2004-20240426-en
Behavioral task
behavioral31
Sample
Setup.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral32
Sample
support/Setup.exe
Resource
win10v2004-20240508-en
General
-
Target
AddOn/MainTargetAddOn.dll
-
Size
233KB
-
MD5
735242f2f06d41bb72f9282779392f6d
-
SHA1
24035ccb45dd1f30310174cb425aa635893d8d63
-
SHA256
1c114c8bdb64555d565a5eb952ce28afcd60520b2ec65ae26025842b6bc78a30
-
SHA512
1092c700dcf4db6f1ae404a306590ff2028c156d08010be366c58e68b7717873b186caaac41616ec8a05633d540e0c97b890b056056016949fc750e80933542e
-
SSDEEP
6144:zcoMJ/DHHm7MkUivXPHyKR2AFaiyjZNrfOX:zcoMtLmQnOP7RfsaX
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 640 wrote to memory of 4736 640 rundll32.exe 82 PID 640 wrote to memory of 4736 640 rundll32.exe 82 PID 640 wrote to memory of 4736 640 rundll32.exe 82