Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
7Static
static
3Masscan Ad...ss.url
windows10-1703-x64
1Masscan Ad...UI.exe
windows10-1703-x64
1Masscan Ad...et.dll
windows10-1703-x64
1Masscan Ad..._3.exe
windows10-1703-x64
7$PLUGINSDI...ns.dll
windows10-1703-x64
3$PLUGINSDI...al.ini
windows10-1703-x64
1$PLUGINSDI...er.bmp
windows10-1703-x64
4$PLUGINSDI...rd.bmp
windows10-1703-x64
4$SYSDIR/Packet.dll
windows10-1703-x64
1$SYSDIR/pthreadVC.dll
windows10-1703-x64
1$SYSDIR/wpcap.dll
windows10-1703-x64
1WinPcapInstall.dll
windows10-1703-x64
3rpcapd.exe
windows10-1703-x64
1Masscan Ad...ig.ini
windows10-1703-x64
1Masscan Ad...an.exe
windows10-1703-x64
1Masscan Ad...00.dll
windows10-1703-x64
3Masscan Ad...ap.dll
windows10-1703-x64
3Analysis
-
max time kernel
316s -
max time network
1608s -
platform
windows10-1703_x64 -
resource
win10-20240404-en -
resource tags
arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system -
submitted
15/06/2024, 08:53
Static task
static1
Behavioral task
behavioral1
Sample
Masscan Advanced Mode/@rdpcrackerss.url
Resource
win10-20240404-en
Behavioral task
behavioral2
Sample
Masscan Advanced Mode/Massscan_GUI.exe
Resource
win10-20240404-en
Behavioral task
behavioral3
Sample
Masscan Advanced Mode/Packet.dll
Resource
win10-20240404-en
Behavioral task
behavioral4
Sample
Masscan Advanced Mode/WinPcap_4_1_3.exe
Resource
win10-20240404-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10-20240611-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/ioSpecial.ini
Resource
win10-20240404-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/modern-header.bmp
Resource
win10-20240404-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/modern-wizard.bmp
Resource
win10-20240404-en
Behavioral task
behavioral9
Sample
$SYSDIR/Packet.dll
Resource
win10-20240611-en
Behavioral task
behavioral10
Sample
$SYSDIR/pthreadVC.dll
Resource
win10-20240404-en
Behavioral task
behavioral11
Sample
$SYSDIR/wpcap.dll
Resource
win10-20240404-en
Behavioral task
behavioral12
Sample
WinPcapInstall.dll
Resource
win10-20240404-en
Behavioral task
behavioral13
Sample
rpcapd.exe
Resource
win10-20240404-en
Behavioral task
behavioral14
Sample
Masscan Advanced Mode/_config.ini
Resource
win10-20240611-en
Behavioral task
behavioral15
Sample
Masscan Advanced Mode/masscan.exe
Resource
win10-20240611-en
Behavioral task
behavioral16
Sample
Masscan Advanced Mode/msvcr100.dll
Resource
win10-20240404-en
Behavioral task
behavioral17
Sample
Masscan Advanced Mode/wpcap.dll
Resource
win10-20240404-en
General
-
Target
Masscan Advanced Mode/@rdpcrackerss.url
-
Size
51B
-
MD5
3f25650b84db985e956fb961717ef93a
-
SHA1
3b2c6a5f3e8c67b34d8c254bddae532dd4a7ffb5
-
SHA256
fb1b7e4dc92fb520e537d7a4770e2ed0fd1784f3bf252ec211aa1967b36f63f1
-
SHA512
10f0e96e5078a4ca6ef499c8bce2aaed9ecb23421e896c347cb3034b5bd7ccd413074e1f88063839dd7c6fc28cdbb1a037895ee4f9a091ec17ee8f4666e5a906
Malware Config
Signatures
Processes
-
C:\Windows\System32\rundll32.exe"C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL "C:\Users\Admin\AppData\Local\Temp\Masscan Advanced Mode\@rdpcrackerss.url"1⤵PID:4192
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:408