Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
5Static
static
3Blindness/...ok.dll
windows10-1703-x64
1Blindness/...64.dll
windows10-1703-x64
1Blindness/...ok.dll
windows10-1703-x64
1Blindness/...64.dll
windows10-1703-x64
1Blindness/...ix.exe
windows10-1703-x64
1Blindness/...ave.js
windows10-1703-x64
3Blindness/...are.js
windows10-1703-x64
3Blindness/...ons.js
windows10-1703-x64
3Blindness/...TI.dll
windows10-1703-x64
1Blindness/...TI.dll
windows10-1703-x64
1Blindness/...ss.exe
windows10-1703-x64
5Blindness/...ok.dll
windows10-1703-x64
1Blindness/...64.dll
windows10-1703-x64
1Blindness/...fs.dll
windows10-1703-x64
1Blindness/d3dhook.dll
windows10-1703-x64
3Blindness/...64.dll
windows10-1703-x64
1Blindness/...32.dll
windows10-1703-x64
3Blindness/...64.dll
windows10-1703-x64
1Blindness/lua/lua.js
windows10-1703-x64
3Blindness/...ua.exe
windows10-1703-x64
1Blindness/...32.exe
windows10-1703-x64
1Blindness/...64.exe
windows10-1703-x64
1Blindness/...es.bat
windows10-1703-x64
1Blindness/process.exe
windows10-1703-x64
1Blindness/run.exe
windows10-1703-x64
1Blindness/...e1.exe
windows10-1703-x64
1Blindness/tiny.exe
windows10-1703-x64
1Blindness/...lp.dll
windows10-1703-x64
1Blindness/...lp.dll
windows10-1703-x64
1Blindness/...rv.dll
windows10-1703-x64
1Blindness/...e3.dll
windows10-1703-x64
1Blindness/...rv.dll
windows10-1703-x64
1Analysis
-
max time kernel
148s -
max time network
142s -
platform
windows10-1703_x64 -
resource
win10-20240404-en -
resource tags
arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system -
submitted
20/06/2024, 08:14
Static task
static1
Behavioral task
behavioral1
Sample
Blindness/CED3D10Hook.dll
Resource
win10-20240611-en
Behavioral task
behavioral2
Sample
Blindness/CED3D10Hook64.dll
Resource
win10-20240611-en
Behavioral task
behavioral3
Sample
Blindness/CED3D11Hook.dll
Resource
win10-20240404-en
Behavioral task
behavioral4
Sample
Blindness/CED3D11Hook64.dll
Resource
win10-20240404-en
Behavioral task
behavioral5
Sample
Blindness/InjectFix.exe
Resource
win10-20240404-en
Behavioral task
behavioral6
Sample
Blindness/autorun/autosave.js
Resource
win10-20240404-en
Behavioral task
behavioral7
Sample
Blindness/autorun/ceshare.js
Resource
win10-20240404-en
Behavioral task
behavioral8
Sample
Blindness/autorun/ceshare/ceshare_permissions.js
Resource
win10-20240404-en
Behavioral task
behavioral9
Sample
Blindness/autorun/dlls/32/CEJVMTI.dll
Resource
win10-20240404-en
Behavioral task
behavioral10
Sample
Blindness/autorun/dlls/64/CEJVMTI.dll
Resource
win10-20240404-en
Behavioral task
behavioral11
Sample
Blindness/blindness.exe
Resource
win10-20240404-en
Behavioral task
behavioral12
Sample
Blindness/ced3d9hook.dll
Resource
win10-20240404-en
Behavioral task
behavioral13
Sample
Blindness/ced3d9hook64.dll
Resource
win10-20240404-en
Behavioral task
behavioral14
Sample
Blindness/clibs64/lfs.dll
Resource
win10-20240404-en
Behavioral task
behavioral15
Sample
Blindness/d3dhook.dll
Resource
win10-20240611-en
Behavioral task
behavioral16
Sample
Blindness/d3dhook64.dll
Resource
win10-20240404-en
Behavioral task
behavioral17
Sample
Blindness/libipt-32.dll
Resource
win10-20240404-en
Behavioral task
behavioral18
Sample
Blindness/libipt-64.dll
Resource
win10-20240404-en
Behavioral task
behavioral19
Sample
Blindness/lua/lua.js
Resource
win10-20240404-en
Behavioral task
behavioral20
Sample
Blindness/lua_extra/lua.exe
Resource
win10-20240404-en
Behavioral task
behavioral21
Sample
Blindness/lua_extra/luac32.exe
Resource
win10-20240404-en
Behavioral task
behavioral22
Sample
Blindness/lua_extra/luac64.exe
Resource
win10-20240611-en
Behavioral task
behavioral23
Sample
Blindness/packfiles.bat
Resource
win10-20240404-en
Behavioral task
behavioral24
Sample
Blindness/process.exe
Resource
win10-20240404-en
Behavioral task
behavioral25
Sample
Blindness/run.exe
Resource
win10-20240404-en
Behavioral task
behavioral26
Sample
Blindness/standalonephase1.exe
Resource
win10-20240404-en
Behavioral task
behavioral27
Sample
Blindness/tiny.exe
Resource
win10-20240404-en
Behavioral task
behavioral28
Sample
Blindness/win64/dbghelp.dll
Resource
win10-20240404-en
Behavioral task
behavioral29
Sample
Blindness/win64/old/dbghelp.dll
Resource
win10-20240611-en
Behavioral task
behavioral30
Sample
Blindness/win64/old/symsrv.dll
Resource
win10-20240404-en
Behavioral task
behavioral31
Sample
Blindness/win64/sqlite3.dll
Resource
win10-20240404-en
Behavioral task
behavioral32
Sample
Blindness/win64/symsrv.dll
Resource
win10-20240404-en
General
-
Target
Blindness/InjectFix.exe
-
Size
605KB
-
MD5
09d083f0e2c1e8a3561209902333ad8f
-
SHA1
d9692d3aba34a39aeb9e53cb3d25562b94e2e597
-
SHA256
83dfcb08ea4aa1b857d952a8a177db775d1a7e9cfc30b528848a4a29c8dbf0b9
-
SHA512
c71371263cacc4872a4bf621614940f08c9436062683be5de921ae6e509079e25ea380623e8945d40858819a664bd76590defb2a89949e8e5666190f1024ca6b
-
SSDEEP
12288:IKOjJsDc2+WC+D+4H/xeGofENaTSuGCC709:IKyacgDD+4fwG1NaTSw
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 4920 InjectFix.exe 4920 InjectFix.exe 4920 InjectFix.exe 4920 InjectFix.exe 4920 InjectFix.exe 4920 InjectFix.exe 4920 InjectFix.exe 4920 InjectFix.exe 4920 InjectFix.exe 4920 InjectFix.exe 4920 InjectFix.exe 4920 InjectFix.exe 4920 InjectFix.exe 4920 InjectFix.exe 4920 InjectFix.exe 4920 InjectFix.exe 4920 InjectFix.exe 4920 InjectFix.exe 4920 InjectFix.exe 4920 InjectFix.exe 4920 InjectFix.exe 4920 InjectFix.exe 4920 InjectFix.exe 4920 InjectFix.exe 4920 InjectFix.exe 4920 InjectFix.exe 4920 InjectFix.exe 4920 InjectFix.exe 4920 InjectFix.exe 4920 InjectFix.exe 4920 InjectFix.exe 4920 InjectFix.exe 4920 InjectFix.exe 4920 InjectFix.exe 4920 InjectFix.exe 4920 InjectFix.exe 4920 InjectFix.exe 4920 InjectFix.exe 4920 InjectFix.exe 4920 InjectFix.exe 4920 InjectFix.exe 4920 InjectFix.exe 4920 InjectFix.exe 4920 InjectFix.exe 4920 InjectFix.exe 4920 InjectFix.exe 4920 InjectFix.exe 4920 InjectFix.exe 4920 InjectFix.exe 4920 InjectFix.exe 4920 InjectFix.exe 4920 InjectFix.exe 4920 InjectFix.exe 4920 InjectFix.exe 4920 InjectFix.exe 4920 InjectFix.exe 4920 InjectFix.exe 4920 InjectFix.exe 4920 InjectFix.exe 4920 InjectFix.exe 4920 InjectFix.exe 4920 InjectFix.exe 4920 InjectFix.exe 4920 InjectFix.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4920 InjectFix.exe -
Suspicious use of SendNotifyMessage 1 IoCs
pid Process 4920 InjectFix.exe