Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
3Static
static
3Conquerors...e.html
windows7-x64
1Conquerors...e.html
windows10-2004-x64
1Conquerors...64.dll
windows7-x64
1Conquerors...64.dll
windows10-2004-x64
1Conquerors...64.dll
windows7-x64
1Conquerors...64.dll
windows10-2004-x64
1Conquerors...64.dll
windows7-x64
1Conquerors...64.dll
windows10-2004-x64
1Conquerors...-0.dll
windows10-2004-x64
1Conquerors...-0.dll
windows10-2004-x64
1Conquerors...-0.dll
windows10-2004-x64
1Conquerors...-0.dll
windows10-2004-x64
1Conquerors...-0.dll
windows10-2004-x64
1Conquerors...-0.dll
windows10-2004-x64
1Conquerors...-0.dll
windows10-2004-x64
1Conquerors...-0.dll
windows10-2004-x64
1Conquerors...-0.dll
windows10-2004-x64
1Conquerors...-0.dll
windows10-2004-x64
1Conquerors...-0.dll
windows10-2004-x64
1Conquerors...-0.dll
windows10-2004-x64
1Conquerors...-0.dll
windows10-2004-x64
1Conquerors...-0.dll
windows10-2004-x64
1Conquerors...-0.dll
windows10-2004-x64
1Conquerors...-0.dll
windows10-2004-x64
1Conquerors...-1.dll
windows10-2004-x64
1Conquerors...-0.dll
windows10-2004-x64
1Conquerors...-0.dll
windows10-2004-x64
1Conquerors...-0.dll
windows10-2004-x64
1Conquerors...-0.dll
windows10-2004-x64
1Conquerors...in.jar
windows7-x64
1Conquerors...in.jar
windows10-2004-x64
1Conquerors...es.jar
windows7-x64
1Analysis
-
max time kernel
122s -
max time network
153s -
platform
windows7_x64 -
resource
win7-20240708-es -
resource tags
arch:x64arch:x86image:win7-20240708-eslocale:es-esos:windows7-x64systemwindows -
submitted
10/07/2024, 01:40
Static task
static1
Behavioral task
behavioral1
Sample
Conquerors v1.5.1/jre/Welcome.html
Resource
win7-20240704-es
Behavioral task
behavioral2
Sample
Conquerors v1.5.1/jre/Welcome.html
Resource
win10v2004-20240709-es
Behavioral task
behavioral3
Sample
Conquerors v1.5.1/jre/bin/JAWTAccessBridge-64.dll
Resource
win7-20240704-es
Behavioral task
behavioral4
Sample
Conquerors v1.5.1/jre/bin/JAWTAccessBridge-64.dll
Resource
win10v2004-20240709-es
Behavioral task
behavioral5
Sample
Conquerors v1.5.1/jre/bin/JavaAccessBridge-64.dll
Resource
win7-20240704-es
Behavioral task
behavioral6
Sample
Conquerors v1.5.1/jre/bin/JavaAccessBridge-64.dll
Resource
win10v2004-20240709-es
Behavioral task
behavioral7
Sample
Conquerors v1.5.1/jre/bin/WindowsAccessBridge-64.dll
Resource
win7-20240708-es
Behavioral task
behavioral8
Sample
Conquerors v1.5.1/jre/bin/WindowsAccessBridge-64.dll
Resource
win10v2004-20240709-es
Behavioral task
behavioral9
Sample
Conquerors v1.5.1/jre/bin/api-ms-win-core-console-l1-1-0.dll
Resource
win10v2004-20240704-es
Behavioral task
behavioral10
Sample
Conquerors v1.5.1/jre/bin/api-ms-win-core-datetime-l1-1-0.dll
Resource
win10v2004-20240709-es
Behavioral task
behavioral11
Sample
Conquerors v1.5.1/jre/bin/api-ms-win-core-debug-l1-1-0.dll
Resource
win10v2004-20240709-es
Behavioral task
behavioral12
Sample
Conquerors v1.5.1/jre/bin/api-ms-win-core-errorhandling-l1-1-0.dll
Resource
win10v2004-20240709-es
Behavioral task
behavioral13
Sample
Conquerors v1.5.1/jre/bin/api-ms-win-core-file-l1-1-0.dll
Resource
win10v2004-20240709-es
Behavioral task
behavioral14
Sample
Conquerors v1.5.1/jre/bin/api-ms-win-core-file-l1-2-0.dll
Resource
win10v2004-20240709-es
Behavioral task
behavioral15
Sample
Conquerors v1.5.1/jre/bin/api-ms-win-core-file-l2-1-0.dll
Resource
win10v2004-20240709-es
Behavioral task
behavioral16
Sample
Conquerors v1.5.1/jre/bin/api-ms-win-core-handle-l1-1-0.dll
Resource
win10v2004-20240709-es
Behavioral task
behavioral17
Sample
Conquerors v1.5.1/jre/bin/api-ms-win-core-heap-l1-1-0.dll
Resource
win10v2004-20240704-es
Behavioral task
behavioral18
Sample
Conquerors v1.5.1/jre/bin/api-ms-win-core-interlocked-l1-1-0.dll
Resource
win10v2004-20240709-es
Behavioral task
behavioral19
Sample
Conquerors v1.5.1/jre/bin/api-ms-win-core-libraryloader-l1-1-0.dll
Resource
win10v2004-20240709-es
Behavioral task
behavioral20
Sample
Conquerors v1.5.1/jre/bin/api-ms-win-core-localization-l1-2-0.dll
Resource
win10v2004-20240709-es
Behavioral task
behavioral21
Sample
Conquerors v1.5.1/jre/bin/api-ms-win-core-memory-l1-1-0.dll
Resource
win10v2004-20240704-es
Behavioral task
behavioral22
Sample
Conquerors v1.5.1/jre/bin/api-ms-win-core-namedpipe-l1-1-0.dll
Resource
win10v2004-20240704-es
Behavioral task
behavioral23
Sample
Conquerors v1.5.1/jre/bin/api-ms-win-core-processenvironment-l1-1-0.dll
Resource
win10v2004-20240709-es
Behavioral task
behavioral24
Sample
Conquerors v1.5.1/jre/bin/api-ms-win-core-processthreads-l1-1-0.dll
Resource
win10v2004-20240709-es
Behavioral task
behavioral25
Sample
Conquerors v1.5.1/jre/bin/api-ms-win-core-processthreads-l1-1-1.dll
Resource
win10v2004-20240709-es
Behavioral task
behavioral26
Sample
Conquerors v1.5.1/jre/bin/api-ms-win-core-profile-l1-1-0.dll
Resource
win10v2004-20240709-es
Behavioral task
behavioral27
Sample
Conquerors v1.5.1/jre/bin/api-ms-win-core-rtlsupport-l1-1-0.dll
Resource
win10v2004-20240709-es
Behavioral task
behavioral28
Sample
Conquerors v1.5.1/jre/bin/api-ms-win-core-string-l1-1-0.dll
Resource
win10v2004-20240709-es
Behavioral task
behavioral29
Sample
Conquerors v1.5.1/jre/bin/api-ms-win-core-synch-l1-1-0.dll
Resource
win10v2004-20240709-es
Behavioral task
behavioral30
Sample
Conquerors v1.5.1/jre/lib/plugin.jar
Resource
win7-20240704-es
Behavioral task
behavioral31
Sample
Conquerors v1.5.1/jre/lib/plugin.jar
Resource
win10v2004-20240709-es
Behavioral task
behavioral32
Sample
Conquerors v1.5.1/jre/lib/resources.jar
Resource
win7-20240704-es
General
-
Target
Conquerors v1.5.1/jre/bin/WindowsAccessBridge-64.dll
-
Size
108KB
-
MD5
18ee3ff4d1f08af296a51a083c0c4d14
-
SHA1
00b47830c1aee41065e52b81613ec75161f13d42
-
SHA256
6712969560366f1af52fa70af95dc6b8132280a110093604ec768482d60ada8a
-
SHA512
fb0dcc66230a9080433d5c142b4f0dcb1082cdb5ba7a232fe5316ddd0bc963c34c3d309b50c71bdbf71443c699d1a6ede83435a22a53ccba84ead88eaced5a0f
-
SSDEEP
1536:EdlKqW27d3dB343JvONqANgYGoGaTl45T3REGTyJYJXPZmVjT+szX8RjF3OsL3hC:d66JvyG5aTl4J3OGmamVf+E6jF+shq
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 2496 wrote to memory of 2484 2496 rundll32.exe 31 PID 2496 wrote to memory of 2484 2496 rundll32.exe 31 PID 2496 wrote to memory of 2484 2496 rundll32.exe 31