Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
4Static
static
3imager_1.8.5.exe
windows11-21h2-x64
4$PLUGINSDI...al.ini
windows11-21h2-x64
3$PLUGINSDI...rd.bmp
windows11-21h2-x64
3QtGraphica...st.qml
windows11-21h2-x64
3QtGraphica...ay.qml
windows11-21h2-x64
3QtGraphica...ze.qml
windows11-21h2-x64
3QtGraphica...nt.qml
windows11-21h2-x64
3QtGraphica...te.qml
windows11-21h2-x64
3QtGraphica...ce.qml
windows11-21h2-x64
3QtGraphica...ow.qml
windows11-21h2-x64
3QtGraphica...st.qml
windows11-21h2-x64
3QtGraphica...ow.qml
windows11-21h2-x64
3QtGraphica...on.qml
windows11-21h2-x64
3QtGraphica...ow.qml
windows11-21h2-x64
3QtGraphica...st.qml
windows11-21h2-x64
3QtGraphica...nt.qml
windows11-21h2-x64
3QtGraphica...ur.qml
windows11-21h2-x64
3QtGraphica...sk.qml
windows11-21h2-x64
3QtGraphica...nt.qml
windows11-21h2-x64
3QtGraphica...ur.qml
windows11-21h2-x64
3QtGraphica...sk.qml
windows11-21h2-x64
3QtGraphica...ltypes
windows11-21h2-x64
3QtGraphica...se.qml
windows11-21h2-x64
3QtGraphica...e.qmlc
windows11-21h2-x64
3QtGraphica...w.qmlc
windows11-21h2-x64
3QtGraphica...ur.qml
windows11-21h2-x64
3QtGraphica...r.qmlc
windows11-21h2-x64
3QtGraphica...lur.js
windows11-21h2-x64
3QtGraphica...w.qmlc
windows11-21h2-x64
3QtGraphica...w.qmlc
windows11-21h2-x64
3QtQuick.2/...in.dll
windows11-21h2-x64
1QtQuick/Co...in.dll
windows11-21h2-x64
1Analysis
-
max time kernel
144s -
max time network
153s -
platform
windows11-21h2_x64 -
resource
win11-20240704-en -
resource tags
arch:x64arch:x86image:win11-20240704-enlocale:en-usos:windows11-21h2-x64system -
submitted
06/07/2024, 21:12
Static task
static1
Behavioral task
behavioral1
Sample
imager_1.8.5.exe
Resource
win11-20240508-en
Behavioral task
behavioral2
Sample
$PLUGINSDIR/ioSpecial.ini
Resource
win11-20240704-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/modern-wizard.bmp
Resource
win11-20240704-en
Behavioral task
behavioral4
Sample
QtGraphicalEffects/BrightnessContrast.qml
Resource
win11-20240704-en
Behavioral task
behavioral5
Sample
QtGraphicalEffects/ColorOverlay.qml
Resource
win11-20240704-en
Behavioral task
behavioral6
Sample
QtGraphicalEffects/Colorize.qml
Resource
win11-20240704-en
Behavioral task
behavioral7
Sample
QtGraphicalEffects/ConicalGradient.qml
Resource
win11-20240704-en
Behavioral task
behavioral8
Sample
QtGraphicalEffects/Desaturate.qml
Resource
win11-20240704-en
Behavioral task
behavioral9
Sample
QtGraphicalEffects/Displace.qml
Resource
win11-20240704-en
Behavioral task
behavioral10
Sample
QtGraphicalEffects/DropShadow.qml
Resource
win11-20240704-en
Behavioral task
behavioral11
Sample
QtGraphicalEffects/GammaAdjust.qml
Resource
win11-20240704-en
Behavioral task
behavioral12
Sample
QtGraphicalEffects/Glow.qml
Resource
win11-20240704-en
Behavioral task
behavioral13
Sample
QtGraphicalEffects/HueSaturation.qml
Resource
win11-20240508-en
Behavioral task
behavioral14
Sample
QtGraphicalEffects/InnerShadow.qml
Resource
win11-20240704-en
Behavioral task
behavioral15
Sample
QtGraphicalEffects/LevelAdjust.qml
Resource
win11-20240704-en
Behavioral task
behavioral16
Sample
QtGraphicalEffects/LinearGradient.qml
Resource
win11-20240704-en
Behavioral task
behavioral17
Sample
QtGraphicalEffects/MaskedBlur.qml
Resource
win11-20240704-en
Behavioral task
behavioral18
Sample
QtGraphicalEffects/OpacityMask.qml
Resource
win11-20240704-en
Behavioral task
behavioral19
Sample
QtGraphicalEffects/RadialGradient.qml
Resource
win11-20240704-en
Behavioral task
behavioral20
Sample
QtGraphicalEffects/RecursiveBlur.qml
Resource
win11-20240704-en
Behavioral task
behavioral21
Sample
QtGraphicalEffects/ThresholdMask.qml
Resource
win11-20240704-en
Behavioral task
behavioral22
Sample
QtGraphicalEffects/plugins.qmltypes
Resource
win11-20240704-en
Behavioral task
behavioral23
Sample
QtGraphicalEffects/private/DropShadowBase.qml
Resource
win11-20240704-en
Behavioral task
behavioral24
Sample
QtGraphicalEffects/private/DropShadowBase.qmlc
Resource
win11-20240704-en
Behavioral task
behavioral25
Sample
QtGraphicalEffects/private/FastInnerShadow.qmlc
Resource
win11-20240508-en
Behavioral task
behavioral26
Sample
QtGraphicalEffects/private/FastMaskedBlur.qml
Resource
win11-20240704-en
Behavioral task
behavioral27
Sample
QtGraphicalEffects/private/FastMaskedBlur.qmlc
Resource
win11-20240704-en
Behavioral task
behavioral28
Sample
QtGraphicalEffects/private/GaussianDirectionalBlur.js
Resource
win11-20240704-en
Behavioral task
behavioral29
Sample
QtGraphicalEffects/private/GaussianGlow.qmlc
Resource
win11-20240508-en
Behavioral task
behavioral30
Sample
QtGraphicalEffects/private/GaussianInnerShadow.qmlc
Resource
win11-20240704-en
Behavioral task
behavioral31
Sample
QtQuick.2/qtquick2plugin.dll
Resource
win11-20240704-en
Behavioral task
behavioral32
Sample
QtQuick/Controls.2/Fusion/qtquickcontrols2fusionstyleplugin.dll
Resource
win11-20240704-en
General
-
Target
QtGraphicalEffects/BrightnessContrast.qml
-
Size
6KB
-
MD5
4d10a854471e82fe9c1639fa31c650b7
-
SHA1
b2d967e879b24c7cb10f41f0643de81a303b9a11
-
SHA256
98060bfd123d2ee8a00fc6e9ea1c769390ef449cae69343b84b3d3602769cbb1
-
SHA512
7a192630c134ae54db3dece1594dee9a077131c890bc21ded37e7b617a3ee9839b5b7212460cb326e6de2f5e42fb628b4442c57ac23312e19c1b607f978c02d4
-
SSDEEP
48:MCdzO6E+iCshVKzlOWGf0hEVufy9ebNyJUHCShU2sKzlGbSjBV5VCVJys8s8sWWr:ndzgUldGcQWYJ+asieWKNUUxNwl6E
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-2608496357-2693146533-2740208290-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-2608496357-2693146533-2740208290-1000_Classes\Local Settings OpenWith.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1728 OpenWith.exe
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\QtGraphicalEffects\BrightnessContrast.qml1⤵
- Modifies registry class
PID:1996
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:1728