Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

winamp551_...mb.exe

windows7-x64

7

winamp551_...mb.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...pi.exe

windows7-x64

1

$PLUGINSDI...pi.exe

windows10-2004-x64

1

Plugins/Gr...mp.dll

windows7-x64

1

Plugins/Gr...mp.dll

windows10-2004-x64

1

Plugins/Gr...mp.dll

windows7-x64

1

Plugins/Gr...mp.dll

windows10-2004-x64

1

Plugins/Gr...X3.dll

windows7-x64

3

Plugins/Gr...X3.dll

windows10-2004-x64

3

Plugins/Gr..._3.dll

windows7-x64

1

Plugins/Gr..._3.dll

windows10-2004-x64

3

Plugins/Gr...EX.dll

windows7-x64

1

Plugins/Gr...EX.dll

windows10-2004-x64

3

Plugins/Gr...X1.dll

windows7-x64

3

Plugins/Gr...X1.dll

windows10-2004-x64

3

Plugins/Gr...mp.dll

windows7-x64

1

Plugins/Gr...mp.dll

windows10-2004-x64

1

Plugins/Gr...mp.dll

windows7-x64

1

Plugins/Gr...mp.dll

windows10-2004-x64

1

Plugins/Gr...mp.dll

windows7-x64

1

Plugins/Gr...mp.dll

windows10-2004-x64

3

Plugins/ds...er.dll

windows7-x64

1

Plugins/ds...er.dll

windows10-2004-x64

1

Plugins/en...us.dll

windows7-x64

3

Plugins/en...us.dll

windows10-2004-x64

3

Plugins/enc_flac.dll

windows7-x64

1

Plugins/enc_flac.dll

windows10-2004-x64

1

Plugins/enc_lame.dll

windows7-x64

1

Plugins/enc_lame.dll

windows10-2004-x64

1

Analysis

  • max time kernel
    139s
  • max time network
    127s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240704-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system
  • submitted
    13/07/2024, 15:34

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    winamp551_Plus_zmb.exe

  • Size

    9.5MB

  • MD5

    ee4e3a6a39282fff632b779177e3066b

  • SHA1

    3dccb4ce2d4592c70e228f87dab4add88499f27c

  • SHA256

    cef9b5ac2a30d274b69fe5a671e9fe3d7fc2e0dd08837f6dca9f02ae16064765

  • SHA512

    cda54c4ae003e9b14fcfea94af58d626930a0de2a196e3be6ca046dba7f6ca51bf7e2773c8aea3dbbb3b8eea14b9660be657a76990614188781151122be74d39

  • SSDEEP

    196608:Qbihab0rdPNIOymKGObXpNAflfBJ62xQjgWnG673XqBeWUw1zN1:no0r8O3OvA9fBJ3xQUWn5L6Bj11J1

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\winamp551_Plus_zmb.exe
    "C:\Users\Admin\AppData\Local\Temp\winamp551_Plus_zmb.exe"
    1⤵
    • Loads dropped DLL
    PID:4372

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\nsv8791.tmp\InstallOptions.dll
    Filesize

    12KB

    MD5

    4c7d97d0786ff08b20d0e8315b5fc3cb

    SHA1

    bb6f475e867b2bf55e4cd214bd4ef68e26d70f6c

    SHA256

    75e20f4c5eb00e9e5cb610273023e9d2c36392fa3b664c264b736c7cc2d1ac84

    SHA512

    f37093fd5cdda74d8f7376c60a05b442f884e9d370347c7c39d84eca88f23fbea6221da2e57197acd78c817a74703c49fb28b89d41c3e34817cc9301b0b6485a

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\nsv8791.tmp\ioSpecial.ini
    Filesize

    839B

    MD5

    02b735fc557f949ef27797792f6942a5

    SHA1

    295c16abce6a28b59b738f6a9b9aa22925a52d91

    SHA256

    4462e93e13a271bce3d09908dc700a07973619831ef98e6244d21bdbea2d51f1

    SHA512

    452be6d2dfbfba4d9a1e04605c19f2f6eb4666465ef9f2d6f450359c2d3dc43de0b912939ef48f85995e734997120f5ab81e90e5b97aae54a02106b2598a214b

    Download Submit