Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
64s -
max time network
54s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
10/06/2024, 16:44
Static task
static1
Behavioral task
behavioral1
Sample
UltraHook/Rinput.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral2
Sample
UltraHook/Rinput.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
UltraHook/uh.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral4
Sample
UltraHook/uh.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral5
Sample
hl2.exe
Resource
win10v2004-20240508-en
General
-
Target
UltraHook/Rinput.exe
-
Size
1.2MB
-
MD5
b7c3362dc5247c93801c3748130837fc
-
SHA1
a13a0c6a1f3bb8dbae28f920020d9cbc1a9f04e6
-
SHA256
dda20e8d1915704bcf2b466789f9f889a8adedab27aed4161de2ba0cd1d1df36
-
SHA512
b06a4545d243d523c5be0cc3a425b54607cf10df20aa381b50df62c73de4e90422d79a830c73e3067c99891a6faedc7a2a944d1fdcdacd55e8666db37d4893c3
-
SSDEEP
24576:oqehELQg2wS4PuAs2Vv8u+MjEApVDSumKz3ilfOviQsjkopJvnHMs4:ojhEb2wSgmglRpoVHlSi9kkJvn
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2556 2888 WerFault.exe 88
Processes
-
C:\Users\Admin\AppData\Local\Temp\UltraHook\Rinput.exe"C:\Users\Admin\AppData\Local\Temp\UltraHook\Rinput.exe"1⤵PID:2888
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2888 -s 2242⤵
- Program crash
PID:2556
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 2888 -ip 28881⤵PID:2692
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=4024,i,7012731823941922179,12386606396608877869,262144 --variations-seed-version --mojo-platform-channel-handle=4396 /prefetch:81⤵PID:1004