Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

1

screen_rec...96.exe

windows7-x64

10

screen_rec...96.exe

windows10-2004-x64

4

$TEMP/down...er.exe

windows7-x64

1

$TEMP/down...er.exe

windows10-2004-x64

1

$TEMP/down...ap.dll

windows7-x64

3

$TEMP/down...ap.dll

windows10-2004-x64

3

$TEMP/down...xe.exe

windows7-x64

1

$TEMP/down...xe.exe

windows10-2004-x64

1

$TEMP/down...up.exe

windows7-x64

1

$TEMP/down...up.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    25/06/2024, 05:22 UTC

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    $TEMP/downloader_easeus/2.0.0/12free/aliyun/AliyunWrapExe.exe

  • Size

    101KB

  • MD5

    1b6da142052f6736f7a657149de75bee

  • SHA1

    1affdaa5faaa6844e6f47e5827ff351975be6cd3

  • SHA256

    015b2652280118c2c5016fec99fc542e32fd39ddfc9df513fe49677fc9bf6d42

  • SHA512

    bf4eeff93839045d71115e7b7b79755b0b871ceca221a3eaedcccb19b9492672f04ee166192809ecdaa1575160bf2516fad5f5062520613dcc1f062577ae3555

  • SSDEEP

    1536:x554a+kMgHZ73LkUluTbDJgX+oLENoN2CraI9WkF1X8OEdlg5BaAUY7BB:CswTbD6LLraInhEdlg5BJUYdB

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\$TEMP\downloader_easeus\2.0.0\12free\aliyun\AliyunWrapExe.exe
    "C:\Users\Admin\AppData\Local\Temp\$TEMP\downloader_easeus\2.0.0\12free\aliyun\AliyunWrapExe.exe"
    1⤵
      PID:2140

    Network

    • flag-us
      DNS
      track.easeus.com
      AliyunWrapExe.exe
      Remote address:
      8.8.8.8:53
      Request
      track.easeus.com
      IN A
    • flag-us
      DNS
      track.easeus.com
      AliyunWrapExe.exe
      Remote address:
      8.8.8.8:53
      Request
      track.easeus.com
      IN A
    • flag-us
      DNS
      track.easeus.com
      AliyunWrapExe.exe
      Remote address:
      8.8.8.8:53
      Request
      track.easeus.com
      IN A
    • flag-us
      DNS
      track.easeus.com
      AliyunWrapExe.exe
      Remote address:
      8.8.8.8:53
      Request
      track.easeus.com
      IN A
    • flag-us
      DNS
      track.easeus.com
      AliyunWrapExe.exe
      Remote address:
      8.8.8.8:53
      Request
      track.easeus.com
      IN A
    No results found
    • 8.8.8.8:53
      track.easeus.com
      dns
      AliyunWrapExe.exe
      310 B
       5

      DNS Request

      track.easeus.com

      DNS Request

      track.easeus.com

      DNS Request

      track.easeus.com

      DNS Request

      track.easeus.com

      DNS Request

      track.easeus.com

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Users\Admin\AppData\Local\Temp\$TEMP\downloader_easeus\2.0.0\12free\aliyun\AliyunConfig.ini
      Filesize

      1KB

      MD5

      22b1ef14efa58a156b4595c769afd78d

      SHA1

      0fc1e8267cf6e2e0525bbf1483a640797a1cc6bb

      SHA256

      aee2dcadab5a043eaefeabd5794d6abf7923f8fbc0e0ac64e115a4aa34f250a1

      SHA512

      3a9c38ee7c210a74ec36723611acf2bd51f5cdbedef6bbae9fef8c627071bf7509bfbf0b5d82beadee3c7bd404d1d568a00b98bb6749bf17f6aa3bb7516be282

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\$TEMP\downloader_easeus\2.0.0\12free\aliyun\DataFile.ini
      Filesize

      88B

      MD5

      7f411750d07619f38537e7fd612b8b44

      SHA1

      cda241a1ce5141288582c8f0ac4850992b427bdc

      SHA256

      ae89726af2bd0c0218fbf63af20d4464f44dced5156364d817b6e73afc8e9f87

      SHA512

      35dad46325060004a66e01e10af6a3ebfd94b6751347b6ec64840c4ec03d81480fc324494ea39dded03bf2f1a1ce352b15ab518d14214c15567af17fb32f16b8

      Download Submit

    We care about your privacy.

    This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.