Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
3Static
static
3Xpander/Bo...er.dll
windows7-x64
1Xpander/Bo...er.dll
windows10-2004-x64
1Xpander/BpmClock3.dll
windows7-x64
1Xpander/BpmClock3.dll
windows10-2004-x64
1Xpander/Co...rs.dll
windows7-x64
1Xpander/Co...rs.dll
windows10-2004-x64
1Xpander/In...t3.dll
windows7-x64
1Xpander/In...t3.dll
windows10-2004-x64
1Xpander/Inverter.dll
windows7-x64
1Xpander/Inverter.dll
windows10-2004-x64
1Xpander/Pa...ry.dll
windows7-x64
1Xpander/Pa...ry.dll
windows10-2004-x64
1Xpander/Spring2.dll
windows7-x64
1Xpander/Spring2.dll
windows10-2004-x64
1Xpander/Su...Xp.dll
windows7-x64
1Xpander/Su...Xp.dll
windows10-2004-x64
1Xpander/Switches.dll
windows7-x64
1Xpander/Switches.dll
windows10-2004-x64
1Xpander/Xpander.dll
windows7-x64
1Xpander/Xpander.dll
windows10-2004-x64
1Analysis
-
max time kernel
125s -
max time network
127s -
platform
windows10-2004_x64 -
resource
win10v2004-20240611-en -
resource tags
arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system -
submitted
14/06/2024, 17:15
Static task
static1
Behavioral task
behavioral1
Sample
Xpander/BoolInverter.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Xpander/BoolInverter.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral3
Sample
Xpander/BpmClock3.dll
Resource
win7-20240611-en
Behavioral task
behavioral4
Sample
Xpander/BpmClock3.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
Xpander/Converters.dll
Resource
win7-20240611-en
Behavioral task
behavioral6
Sample
Xpander/Converters.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
Xpander/Increment3.dll
Resource
win7-20240508-en
Behavioral task
behavioral8
Sample
Xpander/Increment3.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
Xpander/Inverter.dll
Resource
win7-20240508-en
Behavioral task
behavioral10
Sample
Xpander/Inverter.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral11
Sample
Xpander/PatchMemory.dll
Resource
win7-20240611-en
Behavioral task
behavioral12
Sample
Xpander/PatchMemory.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral13
Sample
Xpander/Spring2.dll
Resource
win7-20231129-en
Behavioral task
behavioral14
Sample
Xpander/Spring2.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral15
Sample
Xpander/SubControlsXp.dll
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
Xpander/SubControlsXp.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral17
Sample
Xpander/Switches.dll
Resource
win7-20240508-en
Behavioral task
behavioral18
Sample
Xpander/Switches.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral19
Sample
Xpander/Xpander.dll
Resource
win7-20240508-en
Behavioral task
behavioral20
Sample
Xpander/Xpander.dll
Resource
win10v2004-20240611-en
General
-
Target
Xpander/Spring2.dll
-
Size
71KB
-
MD5
031ae84de02b23a950897071f9a685cb
-
SHA1
6b202644354de46e3c6eb42388dee64429b5d256
-
SHA256
7cce9fe752e82988d52510e89ab370bb6d01eb4136ac1c03fbdd6f39570d70cf
-
SHA512
83bd3277aaab1f1fefc5a0e5f5c811485aade68966a59df480f634c65497acb57fe2c996ce674a16d846991d4eb23909b2eada6866e648e1d5aec7451e4438e3
-
SSDEEP
1536:tyZxYA3CQHNnNRSWQ2E14f+RC4rT3cRx:tyZ93/PSWQH4fr4rT
Malware Config
Signatures
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\Xpander\Spring2.dll,#11⤵PID:1424
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=4084,i,7977653611488681184,6839495125838449898,262144 --variations-seed-version --mojo-platform-channel-handle=1292 /prefetch:81⤵PID:4872