Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

3

trichlorom...ty.exe

windows7-x64

1

trichlorom...ty.exe

windows10-2004-x64

1

trichlorom...ty.exe

windows7-x64

1

trichlorom...ty.exe

windows10-2004-x64

1

trichlorom...ne.exe

windows7-x64

8

trichlorom...ne.exe

windows10-2004-x64

8

trichlorom...ty.exe

windows7-x64

1

trichlorom...ty.exe

windows10-2004-x64

1

trichloromethane.exe

windows7-x64

8

trichloromethane.exe

windows10-2004-x64

8

trichlorom...te.bat

windows7-x64

1

trichlorom...te.bat

windows10-2004-x64

1

trichlorom...DL.dll

windows7-x64

1

trichlorom...DL.dll

windows10-2004-x64

1

trichlorom...-4.dll

windows7-x64

3

trichlorom...-4.dll

windows10-2004-x64

3

trichlorom...mu.exe

windows7-x64

1

trichlorom...mu.exe

windows10-2004-x64

1

trichlorom...ss.exe

windows7-x64

1

trichlorom...ss.exe

windows10-2004-x64

1

trichlorom...sm.exe

windows7-x64

1

trichlorom...sm.exe

windows10-2004-x64

1

trichlorom...in.exe

windows7-x64

7

trichlorom...in.exe

windows10-2004-x64

7

trichlorom...bin.py

windows7-x64

3

trichlorom...bin.py

windows10-2004-x64

3

trichlorom...ne.exe

windows7-x64

8

trichlorom...ne.exe

windows10-2004-x64

8

trichlorom...ty.exe

windows7-x64

1

trichlorom...ty.exe

windows10-2004-x64

1

trichloromethane.exe

windows7-x64

8

trichloromethane.exe

windows10-2004-x64

8

Analysis

  • max time kernel
    125s
  • max time network
    135s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19/06/2024, 16:40

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    trichloromethane.exe-Malware-main/trichloromethane-safety.exe

  • Size

    83KB

  • MD5

    1453f56916c0ea96b9ba5b49f09757e2

  • SHA1

    3e25edc13b69e5db4769f061f586e42b812996bf

  • SHA256

    da79e0317881f0600ddaddf593184b1e7d6eb54604de089e4d625741e21c004b

  • SHA512

    37febf9c7bd3f35b45de356e8dc92a9bd5e065471669cb9afdb7048308df0c852b3cbfc5f2a3cab2887d67c9dab4f2fb2bb21ee9de42d13b700784367d1f8ca6

  • SSDEEP

    1536:X5RkE0HODVj5XVgyi31RRzuo3tpwOcr2zS5KTV8yYJcsWrcd6/MAedu:X590HODVViFRRz3dpxe2zSwTXoj6/Mz0

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\trichloromethane.exe-Malware-main\trichloromethane-safety.exe
    "C:\Users\Admin\AppData\Local\Temp\trichloromethane.exe-Malware-main\trichloromethane-safety.exe"
    1⤵
      PID:3096
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=3240,i,17096020621006928097,15544233752327415349,262144 --variations-seed-version --mojo-platform-channel-handle=4336 /prefetch:8
      1⤵
        PID:1052
      • C:\Windows\system32\AUDIODG.EXE
        C:\Windows\system32\AUDIODG.EXE 0x300 0x468
        1⤵
        • Suspicious use of AdjustPrivilegeToken
        PID:2304

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads