Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

3

MTS_Remote...64.exe

windows10-2004-x64

8

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...nu.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...fo.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

bin/7za.exe

windows10-2004-x64

1

bin/ViGEmClient.dll

windows10-2004-x64

1

bin/archive.dll

windows10-2004-x64

1

bin/locales/mr.ps1

windows10-2004-x64

3

bin/lz4.dll

windows10-2004-x64

1

bin/miniupnpc.dll

windows10-2004-x64

1

bin/msvcp140.dll

windows10-2004-x64

1

bin/msvcp140_1.dll

windows10-2004-x64

1

bin/msvcp140_2.dll

windows10-2004-x64

1

bin/msvcp1...it.dll

windows10-2004-x64

1

bin/msvcp1...ds.dll

windows10-2004-x64

1

bin/resour...x.html

windows10-2004-x64

1

bin/resour...7bd.js

windows10-2004-x64

3

bin/resour...8ec.js

windows10-2004-x64

3

bin/sentry.dll

windows10-2004-x64

1

bin/sqlite3.dll

windows10-2004-x64

1

bin/tesseract53.dll

windows10-2004-x64

1

bin/tiff.dll

windows10-2004-x64

1

bin/turbojpeg.dll

windows10-2004-x64

1

bin/vcruntime140.dll

windows10-2004-x64

1

bin/vcrunt..._1.dll

windows10-2004-x64

1

bin/vk_swi...er.dll

windows10-2004-x64

1

bin/vulkan-1.dll

windows10-2004-x64

1

bin/zlib1.dll

windows10-2004-x64

1

bin/zstd.dll

windows10-2004-x64

1

tmp/ViGEmB...64.msi

windows10-2004-x64

6

Resubmissions

16/06/2024, 18:21 UTC

240616-wzfn9avhrn 7

16/06/2024, 17:48 UTC

240616-wdm67s1alg 8

Analysis

  • max time kernel
    434s
  • max time network
    1174s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240611-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
  • submitted
    16/06/2024, 17:48 UTC

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    bin/msvcp140.dll

  • Size

    561KB

  • MD5

    72f3d84384e888bf0d38852eb863026b

  • SHA1

    8e6a0257591eb913ae7d0e975c56306b3f680b3f

  • SHA256

    a4c2229bdc2a2a630acdc095b4d86008e5c3e3bc7773174354f3da4f5beb9cde

  • SHA512

    6d53634bc51bd383358e0d55988d70aee6ed3897bc6ae5e0d2413bed27ecff4c8092020682cd089859023b02d9a1858ac42e64d59c38ba90fbaf89b656c539a6

  • SSDEEP

    12288:rSTTigI46Bb3SUPvRgrKtzL4oaQEKZm+jWodEEVPLwtQB:rUStZaQEKZm+jWodEE9CQB

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\bin\msvcp140.dll,#1
    1⤵
      PID:3876

    Network

    • flag-us
      DNS
      g.bing.com
      Remote address:
      8.8.8.8:53
      Request
      g.bing.com
      IN A
      Response
      g.bing.com
      IN CNAME
      g-bing-com.dual-a-0034.a-msedge.net
      g-bing-com.dual-a-0034.a-msedge.net
      IN CNAME
      dual-a-0034.a-msedge.net
      dual-a-0034.a-msedge.net
      IN A
      204.79.197.237
      dual-a-0034.a-msedge.net
      IN A
      13.107.21.237
    • flag-us
      DNS
      133.32.126.40.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      133.32.126.40.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      203.197.17.2.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      203.197.17.2.in-addr.arpa
      IN PTR
      Response
      203.197.17.2.in-addr.arpa
      IN PTR
      a2-17-197-203deploystaticakamaitechnologiescom
    • flag-us
      DNS
      8.8.8.8.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      8.8.8.8.in-addr.arpa
      IN PTR
      Response
      8.8.8.8.in-addr.arpa
      IN PTR
      dnsgoogle
    • flag-us
      DNS
      57.169.31.20.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      57.169.31.20.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      97.61.62.23.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      97.61.62.23.in-addr.arpa
      IN PTR
      Response
      97.61.62.23.in-addr.arpa
      IN PTR
      a23-62-61-97deploystaticakamaitechnologiescom
    • flag-us
      DNS
      183.59.114.20.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      183.59.114.20.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      206.23.85.13.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      206.23.85.13.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      140.71.91.104.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      140.71.91.104.in-addr.arpa
      IN PTR
      Response
      140.71.91.104.in-addr.arpa
      IN PTR
      a104-91-71-140deploystaticakamaitechnologiescom
    • flag-us
      DNS
      240.197.17.2.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      240.197.17.2.in-addr.arpa
      IN PTR
      Response
      240.197.17.2.in-addr.arpa
      IN PTR
      a2-17-197-240deploystaticakamaitechnologiescom
    • flag-us
      DNS
      11.227.111.52.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      11.227.111.52.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      213.143.182.52.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      213.143.182.52.in-addr.arpa
      IN PTR
      Response
    • 204.79.197.237:443
      g.bing.com
      tls
      2.5kB
       9.0kB
       20
      17
    • 23.62.61.97:443
      www.bing.com
      tls
      1.5kB
       5.4kB
       17
      12
    • 23.62.61.97:443
      www.bing.com
      tls
      1.8kB
       11.2kB
       21
      16
    • 8.8.8.8:53
      g.bing.com
      dns
      56 B
       151 B
       1
      1

      DNS Request

      g.bing.com

      DNS Response

      204.79.197.237
      13.107.21.237

    • 8.8.8.8:53
      133.32.126.40.in-addr.arpa
      dns
      72 B
       158 B
       1
      1

      DNS Request

      133.32.126.40.in-addr.arpa

    • 8.8.8.8:53
      203.197.17.2.in-addr.arpa
      dns
      71 B
       135 B
       1
      1

      DNS Request

      203.197.17.2.in-addr.arpa

    • 8.8.8.8:53
      8.8.8.8.in-addr.arpa
      dns
      66 B
       90 B
       1
      1

      DNS Request

      8.8.8.8.in-addr.arpa

    • 8.8.8.8:53
      57.169.31.20.in-addr.arpa
      dns
      71 B
       157 B
       1
      1

      DNS Request

      57.169.31.20.in-addr.arpa

    • 8.8.8.8:53
      97.61.62.23.in-addr.arpa
      dns
      70 B
       133 B
       1
      1

      DNS Request

      97.61.62.23.in-addr.arpa

    • 8.8.8.8:53
      183.59.114.20.in-addr.arpa
      dns
      72 B
       158 B
       1
      1

      DNS Request

      183.59.114.20.in-addr.arpa

    • 8.8.8.8:53
      206.23.85.13.in-addr.arpa
      dns
      71 B
       145 B
       1
      1

      DNS Request

      206.23.85.13.in-addr.arpa

    • 8.8.8.8:53
      140.71.91.104.in-addr.arpa
      dns
      72 B
       137 B
       1
      1

      DNS Request

      140.71.91.104.in-addr.arpa

    • 8.8.8.8:53
      240.197.17.2.in-addr.arpa
      dns
      71 B
       135 B
       1
      1

      DNS Request

      240.197.17.2.in-addr.arpa

    • 8.8.8.8:53
      11.227.111.52.in-addr.arpa
      dns
      72 B
       158 B
       1
      1

      DNS Request

      11.227.111.52.in-addr.arpa

    • 8.8.8.8:53
      213.143.182.52.in-addr.arpa
      dns
      73 B
       147 B
       1
      1

      DNS Request

      213.143.182.52.in-addr.arpa

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    We care about your privacy.

    This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.