Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
7Static
static
1extra-soun....4.zip
windows7-x64
1extra-soun....4.zip
windows10-2004-x64
1extra-soun...ild.js
windows7-x64
3extra-soun...ild.js
windows10-2004-x64
3extra-soun...er.jar
windows7-x64
1extra-soun...er.jar
windows10-2004-x64
1extra-soun...radlew
ubuntu-18.04-amd64
1extra-soun...radlew
debian-9-armhf
1extra-soun...radlew
debian-9-mips
1extra-soun...radlew
debian-9-mipsel
1extra-soun...ew.bat
windows7-x64
1extra-soun...ew.bat
windows10-2004-x64
7Analysis
-
max time kernel
122s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
19/07/2024, 04:57
Static task
static1
Behavioral task
behavioral1
Sample
extra-sounds-3-1.21-build.4.zip
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
extra-sounds-3-1.21-build.4.zip
Resource
win10v2004-20240704-en
Behavioral task
behavioral3
Sample
extra-sounds-3-1.21-build.4/build.js
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
extra-sounds-3-1.21-build.4/build.js
Resource
win10v2004-20240709-en
Behavioral task
behavioral5
Sample
extra-sounds-3-1.21-build.4/gradle/wrapper/gradle-wrapper.jar
Resource
win7-20240708-en
Behavioral task
behavioral6
Sample
extra-sounds-3-1.21-build.4/gradle/wrapper/gradle-wrapper.jar
Resource
win10v2004-20240709-en
Behavioral task
behavioral7
Sample
extra-sounds-3-1.21-build.4/gradlew
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral8
Sample
extra-sounds-3-1.21-build.4/gradlew
Resource
debian9-armhf-20240418-en
Behavioral task
behavioral9
Sample
extra-sounds-3-1.21-build.4/gradlew
Resource
debian9-mipsbe-20240418-en
Behavioral task
behavioral10
Sample
extra-sounds-3-1.21-build.4/gradlew
Resource
debian9-mipsel-20240226-en
Behavioral task
behavioral11
Sample
extra-sounds-3-1.21-build.4/gradlew.bat
Resource
win7-20240708-en
Behavioral task
behavioral12
Sample
extra-sounds-3-1.21-build.4/gradlew.bat
Resource
win10v2004-20240709-en
General
-
Target
extra-sounds-3-1.21-build.4/gradlew.bat
-
Size
2KB
-
MD5
25a193a0d73fa800fa4474670b6a8797
-
SHA1
50f63baa3cd99aac889e1a188a50eee6c8901030
-
SHA256
95e8ae8e8a256a2f066cdd745d56f7a3fc87aa058a2e4beb483300db7171bd1f
-
SHA512
583784202fefb56b0da774d74999dbfc3f438a77dd5c7a4f980af1d2b176e2bfaaae056bfe800a5de984a911846d891fceee87c2aaf2fc2d7c6d682a6446dcad
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 6 IoCs
description pid Process procid_target PID 2684 wrote to memory of 2752 2684 cmd.exe 31 PID 2684 wrote to memory of 2752 2684 cmd.exe 31 PID 2684 wrote to memory of 2752 2684 cmd.exe 31 PID 2684 wrote to memory of 1544 2684 cmd.exe 32 PID 2684 wrote to memory of 1544 2684 cmd.exe 32 PID 2684 wrote to memory of 1544 2684 cmd.exe 32
Processes
-
C:\Windows\system32\cmd.execmd /c "C:\Users\Admin\AppData\Local\Temp\extra-sounds-3-1.21-build.4\gradlew.bat"1⤵
- Suspicious use of WriteProcessMemory
PID:2684 -
C:\Windows\system32\java.exejava.exe -version2⤵PID:2752
-
-
C:\Windows\system32\java.exe"java.exe" "-Xmx64m" "-Xms64m" "-Dorg.gradle.appname=gradlew" -classpath "C:\Users\Admin\AppData\Local\Temp\extra-sounds-3-1.21-build.4\\gradle\wrapper\gradle-wrapper.jar" org.gradle.wrapper.GradleWrapperMain2⤵PID:1544
-