Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
9Static
static
9hwid pack/...sk.exe
windows10-1703-x64
6hwid pack/...up.exe
windows10-1703-x64
3hwid pack/...RU.exe
windows10-1703-x64
3hwid pack/...ll.exe
windows10-1703-x64
3hwid pack/...rt.exe
windows10-1703-x64
5hwid pack/...64.exe
windows10-1703-x64
5hwid pack/...IN.exe
windows10-1703-x64
3hwid pack/...64.exe
windows10-1703-x64
1hwid pack/...16.exe
windows10-1703-x64
hwid pack/...IT.exe
windows10-1703-x64
1hwid pack/...LL.dll
windows10-1703-x64
3hwid pack/...YS.sys
windows10-1703-x64
1hwid pack/...64.sys
windows10-1703-x64
1hwid pack/...64.sys
windows10-1703-x64
1hwid pack/...lp.pdf
windows10-1703-x64
3hwid pack/...rt.exe
windows10-1703-x64
3hwid pack/...Un.exe
windows10-1703-x64
6hwid pack/...Un.exe
windows10-1703-x64
6hwid pack/...ew.chm
windows10-1703-x64
1hwid pack/...ew.exe
windows10-1703-x64
6Analysis
-
max time kernel
132s -
max time network
149s -
platform
windows10-1703_x64 -
resource
win10-20240404-en -
resource tags
arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system -
submitted
01/08/2024, 21:16
Behavioral task
behavioral1
Sample
hwid pack/HardDisk.exe
Resource
win10-20240404-en
Behavioral task
behavioral2
Sample
hwid pack/MacSetup.exe
Resource
win10-20240404-en
Behavioral task
behavioral3
Sample
hwid pack/monitor serial/CRU.exe
Resource
win10-20240404-en
Behavioral task
behavioral4
Sample
hwid pack/monitor serial/reset-all.exe
Resource
win10-20240404-en
Behavioral task
behavioral5
Sample
hwid pack/monitor serial/restart.exe
Resource
win10-20240404-en
Behavioral task
behavioral6
Sample
hwid pack/monitor serial/restart64.exe
Resource
win10-20240404-en
Behavioral task
behavioral7
Sample
hwid pack/serial changer/AMIDEWIN.exe
Resource
win10-20240404-en
Behavioral task
behavioral8
Sample
hwid pack/serial changer/AMIDEWINx64.exe
Resource
win10-20240404-en
Behavioral task
behavioral9
Sample
hwid pack/serial changer/DMI16.exe
Resource
win10-20240404-en
Behavioral task
behavioral10
Sample
hwid pack/serial changer/DMIEDIT.exe
Resource
win10-20240404-en
Behavioral task
behavioral11
Sample
hwid pack/serial changer/UCOREDLL.dll
Resource
win10-20240404-en
Behavioral task
behavioral12
Sample
hwid pack/serial changer/UCORESYS.sys
Resource
win10-20240404-en
Behavioral task
behavioral13
Sample
hwid pack/serial changer/UCOREW64.sys
Resource
win10-20240404-en
Behavioral task
behavioral14
Sample
hwid pack/serial changer/amifldrv64.sys
Resource
win10-20240404-en
Behavioral task
behavioral15
Sample
hwid pack/uninstall/Revo Uninstaller Help.pdf
Resource
win10-20240404-en
Behavioral task
behavioral16
Sample
hwid pack/uninstall/RevoUPort.exe
Resource
win10-20240404-en
Behavioral task
behavioral17
Sample
hwid pack/uninstall/x64/RevoUn.exe
Resource
win10-20240404-en
Behavioral task
behavioral18
Sample
hwid pack/uninstall/x86/RevoUn.exe
Resource
win10-20240404-en
Behavioral task
behavioral19
Sample
hwid pack/usb device serial/USBDeview.chm
Resource
win10-20240611-en
Behavioral task
behavioral20
Sample
hwid pack/usb device serial/USBDeview.exe
Resource
win10-20240404-en
General
-
Target
hwid pack/serial changer/AMIDEWINx64.exe
-
Size
453KB
-
MD5
6a6505b2413d2c7b16c6d059448db9e5
-
SHA1
dfe6c6b6051c26326a12dc9d0d5701cb4728266c
-
SHA256
53e3b72f8eb13acf3cb69d4cb124e8dc64fc541555c3c95cc8003b8046853955
-
SHA512
1c0531581f0efe683ab763f6633ace60f0637b22830e7ec551babe19ac777a1a6821dc568bce13a8abee8bfef1c7d9397e0bee1c78c00810c65dadd788dab2a3
-
SSDEEP
6144:JIeh4+TOKGuTSuXCJ6AtCoZPhGL/TnJ+z5rsxQhsCI9t/tk7MP:jpPTxXihA+zBhsC2Z
Malware Config
Signatures
-
Suspicious behavior: LoadsDriver 1 IoCs
pid Process 624 Process not Found