Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
7Static
static
7我爱记�...Ps.dll
windows7-x64
1我爱记�...Ps.dll
windows10-2004-x64
1我爱记�...fo.dll
windows7-x64
3我爱记�...fo.dll
windows10-2004-x64
3我爱记�...��.exe
windows7-x64
7我爱记�...��.exe
windows10-2004-x64
1我爱记�...��.exe
windows7-x64
7我爱记�...��.exe
windows10-2004-x64
7我爱记�...��.exe
windows7-x64
1我爱记�...��.exe
windows10-2004-x64
1Analysis
-
max time kernel
140s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
25/06/2024, 19:32
Behavioral task
behavioral1
Sample
我爱记牌器/ComPs.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
我爱记牌器/ComPs.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
我爱记牌器/VerInfo.dll
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
我爱记牌器/VerInfo.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
我爱记牌器/去后台链接补丁.exe
Resource
win7-20240508-en
Behavioral task
behavioral6
Sample
我爱记牌器/去后台链接补丁.exe
Resource
win10v2004-20240611-en
Behavioral task
behavioral7
Sample
我爱记牌器/我爱记牌器.exe
Resource
win7-20240508-en
Behavioral task
behavioral8
Sample
我爱记牌器/我爱记牌器.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
我爱记牌器/我爱记牌器自动升级.exe
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
我爱记牌器/我爱记牌器自动升级.exe
Resource
win10v2004-20240611-en
General
-
Target
我爱记牌器/去后台链接补丁.exe
-
Size
103KB
-
MD5
6e0ff806f2b2a932afcf85c136f3b289
-
SHA1
bed3f60513f8c9f73b00e001bfe8007c8e2237d8
-
SHA256
9bbd66de8e4c4c9c9ff8b9c0906fb56be73a49a51a7b593e1484128904be6787
-
SHA512
651ed4bd06964e9a8b489bd836d462d46595529597c3fab78af1933a2165c027d072565cb3bd85cb1c0687ef9afc5c630227bb1109c722920bfcb22b23dae02a
-
SSDEEP
1536:kqZdpWjD9uNvkQiym2N9eMZchDGRgWdGxkYyBNBsQC3dGyYD1qdWfenDeIfuYWao:/kNuV9NwhDG5wxk3nOQMID1QDF2mbk
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
pid Process 2228 去后台链接补丁.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
33KB
MD5e4ec57e8508c5c4040383ebe6d367928
SHA1b22bcce36d9fdeae8ab7a7ecc0b01c8176648d06
SHA2568ad9e47693e292f381da42ddc13724a3063040e51c26f4ca8e1f8e2f1ddd547f
SHA51277d5cf66caf06e192e668fae2b2594e60a498e8e0ccef5b09b9710721a4cdb0c852d00c446fd32c5b5c85e739de2e73cb1f1f6044879fe7d237341bbb6f27822