Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    93s
  • max time network
    101s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240704-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system
  • submitted
    09/07/2024, 13:59

General

  • Target

    TVK.exe

  • Size

    1.8MB

  • MD5

    423c464233957c5051d0ff3c99374eb9

  • SHA1

    b6f57eddda400ad497944ee9e83a1f5668fdf17c

  • SHA256

    49ff2e5130f5eface959ad9926fd7a6095c6e2b3341b246b772a94362493cc33

  • SHA512

    0e7b9bfbf08f5ccfae2a4e0eb5b781c4942401112734d86ba1363321be8ce45f5fdfad373122b35edb5b27af6b96f54b2084cb18e30162d5be4543a607aafc48

  • SSDEEP

    49152:EOEnpV1qK/jsTargC/1TuusZWhKWGL6ImfT:bgcK7rBtTuuVZGL6TT

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\TVK.exe
    "C:\Users\Admin\AppData\Local\Temp\TVK.exe"
    1⤵
    • Loads dropped DLL
    PID:1568

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\nss80DA.tmp\InstallOptions.dll

    Filesize

    12KB

    MD5

    695751df50c11f303b060d63eababe1d

    SHA1

    ffa5fa91750c3e63589fecae8aa90c232611c94d

    SHA256

    4f871b4c8815758f7718ad68d688c6dc05cae205ddf3bcb00147a99746414435

    SHA512

    c9877e0d08c65b23717f3acf3be92ead79c6afde594bd4358694e128fb7149f4a1f33380fae0fb65411e5c68a9d91d2a353b4ef3da5169d3452441eb65880ce0

  • C:\Users\Admin\AppData\Local\Temp\nss80DA.tmp\ioSpecial.ini

    Filesize

    548B

    MD5

    0678560f57a3ea1a706fa49b949fc2c9

    SHA1

    19ab91fc1d7eb6a5bafd60707eabd7b00f7aea8d

    SHA256

    e4559ac6dd4c76a758a65b682a679e5b58c8f3d526f7210553466f18109260fd

    SHA512

    ce627e9a854ab121d379f789521bc3d3b3d0d5b4a24380066f35cbbd756cd38ce1aa49812a5e29064b6ead769664d9c1e7f3676934c540cce49b093daebc104c