Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19/07/2024, 10:06

General

  • Target

    QuakeRPG320.exe

  • Size

    729KB

  • MD5

    bd2835f62c2e03d10dcac0d6b4541b85

  • SHA1

    a3a315b6c7fd5c099ec6f184bc77d98bff1c0ac6

  • SHA256

    27a512cacdd75982afa4a3acf8e491e943015225c9fda4db79f563c22a2932c7

  • SHA512

    4b7cdac25a54be587ba927563592ebb83423b62aa70f095c47f32b2af700f33279562020561e59ca2c7abd7288a9107ea33e6db046554501fee99e96fc78442d

  • SSDEEP

    12288:Be792eBoxhjooulC0iSoum6eiQeFijc4yRgp3vCR1/sZnwQokbj:BeQQYN0iSooXM3vW+ZwQj

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

Processes

  • C:\Users\Admin\AppData\Local\Temp\QuakeRPG320.exe
    "C:\Users\Admin\AppData\Local\Temp\QuakeRPG320.exe"
    1⤵
    • Loads dropped DLL
    PID:4108

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\nsm9898.tmp\InstallOptions.dll

    Filesize

    14KB

    MD5

    296a5f3179fa8d7a7a855eaf696ede44

    SHA1

    57aa5b71553ed282dd22c768e039a187f5c13f63

    SHA256

    ee0ad77e681c4d0fdf1d67df5f4ca03e6bdd8e3b05dfb47a83ad5c733ed62960

    SHA512

    bc527d1485f468e8d098057e0e38e8cb7aa6eb64d4ca30927b99b1552a3177b132b989015ff95bdf2ca046bf11a54b4b456f51e024fbc734fbb548c3499e53f6

  • C:\Users\Admin\AppData\Local\Temp\nsm9898.tmp\ioSpecial.ini

    Filesize

    585B

    MD5

    2a6b62f27343508923811a0d03da042c

    SHA1

    1b291d36c0315fc07567ff97c0a4d2a5c3bae1e6

    SHA256

    e4c71e625b0df2e58042a80e1b0432f63e285524a012ac8c79f15c51b9c8a2b7

    SHA512

    78a12b51b652b706478927999432a714c956d519c61c80e921c53143e3774dcd48999680aaed5a10dcb19dd345a8f2b572905fd2d87736355786f28e00cd32cd