Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
3Static
static
3FeatherRelease.rar
windows7-x64
3FeatherRelease.rar
windows10-2004-x64
3Microsoft....re.dll
windows7-x64
1Microsoft....re.dll
windows10-2004-x64
1Microsoft....ms.dll
windows7-x64
1Microsoft....ms.dll
windows10-2004-x64
1Microsoft....pf.dll
windows7-x64
1Microsoft....pf.dll
windows10-2004-x64
1bin/API.dll
windows7-x64
1bin/API.dll
windows10-2004-x64
1bin/Ace/ace.html
windows7-x64
3bin/Ace/ace.html
windows10-2004-x64
3bin/Ace/ace/ace.js
windows7-x64
3bin/Ace/ace/ace.js
windows10-2004-x64
3bin/Ace/ac...ify.js
windows7-x64
3bin/Ace/ac...ify.js
windows10-2004-x64
3bin/Ace/ac...ens.js
windows7-x64
3bin/Ace/ac...ens.js
windows10-2004-x64
3bin/Ace/ac...ite.js
windows7-x64
3bin/Ace/ac...ite.js
windows10-2004-x64
3bin/Ace/ac...met.js
windows7-x64
3bin/Ace/ac...met.js
windows10-2004-x64
3bin/Ace/ac...ker.js
windows7-x64
3bin/Ace/ac...ker.js
windows10-2004-x64
3bin/Ace/ac...enu.js
windows7-x64
3bin/Ace/ac...enu.js
windows10-2004-x64
3bin/Ace/ac...ols.js
windows7-x64
3bin/Ace/ac...ols.js
windows10-2004-x64
3bin/Ace/ac...ing.js
windows7-x64
3bin/Ace/ac...ing.js
windows10-2004-x64
3bin/Ace/ac...ist.js
windows7-x64
3bin/Ace/ac...ist.js
windows10-2004-x64
3Analysis
-
max time kernel
1s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
06/08/2024, 14:26
Static task
static1
Behavioral task
behavioral1
Sample
FeatherRelease.rar
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
FeatherRelease.rar
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
Microsoft.Web.WebView2.Core.dll
Resource
win7-20240729-en
Behavioral task
behavioral4
Sample
Microsoft.Web.WebView2.Core.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
Microsoft.Web.WebView2.WinForms.dll
Resource
win7-20240704-en
Behavioral task
behavioral6
Sample
Microsoft.Web.WebView2.WinForms.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
Microsoft.Web.WebView2.Wpf.dll
Resource
win7-20240729-en
Behavioral task
behavioral8
Sample
Microsoft.Web.WebView2.Wpf.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
bin/API.dll
Resource
win7-20240708-en
Behavioral task
behavioral10
Sample
bin/API.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
bin/Ace/ace.html
Resource
win7-20240704-en
Behavioral task
behavioral12
Sample
bin/Ace/ace.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
bin/Ace/ace/ace.js
Resource
win7-20240729-en
Behavioral task
behavioral14
Sample
bin/Ace/ace/ace.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
bin/Ace/ace/ext-beautify.js
Resource
win7-20240704-en
Behavioral task
behavioral16
Sample
bin/Ace/ace/ext-beautify.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
bin/Ace/ace/ext-code_lens.js
Resource
win7-20240704-en
Behavioral task
behavioral18
Sample
bin/Ace/ace/ext-code_lens.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
bin/Ace/ace/ext-elastic_tabstops_lite.js
Resource
win7-20240708-en
Behavioral task
behavioral20
Sample
bin/Ace/ace/ext-elastic_tabstops_lite.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
bin/Ace/ace/ext-emmet.js
Resource
win7-20240705-en
Behavioral task
behavioral22
Sample
bin/Ace/ace/ext-emmet.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
bin/Ace/ace/ext-error_marker.js
Resource
win7-20240708-en
Behavioral task
behavioral24
Sample
bin/Ace/ace/ext-error_marker.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
bin/Ace/ace/ext-keybinding_menu.js
Resource
win7-20240705-en
Behavioral task
behavioral26
Sample
bin/Ace/ace/ext-keybinding_menu.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
bin/Ace/ace/ext-language_tools.js
Resource
win7-20240704-en
Behavioral task
behavioral28
Sample
bin/Ace/ace/ext-language_tools.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
bin/Ace/ace/ext-linking.js
Resource
win7-20240705-en
Behavioral task
behavioral30
Sample
bin/Ace/ace/ext-linking.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
bin/Ace/ace/ext-modelist.js
Resource
win7-20240729-en
Behavioral task
behavioral32
Sample
bin/Ace/ace/ext-modelist.js
Resource
win10v2004-20240802-en
General
-
Target
FeatherRelease.rar
-
Size
31.6MB
-
MD5
e6cde71e013fbcd24098be47ce1b02ef
-
SHA1
04fc1aedbfa583a3d7796c0b20b13a1a432eba36
-
SHA256
46a8ce6edaccc04c1c1123ad08eb7168a931b8b161dacdd8e7a7faa3c0ad6c24
-
SHA512
2ffdc74ed77932ffc7feccc9018f55442beb9b6b45b6be300f0dd445aecc9dfd6c0fb9b1208efeb913e465e5eac3243cdc1f008f256c40e26c338362a783f140
-
SSDEEP
786432:rEkHm/NnO7fSi9DvKniX2N4BuJevEjnfF6pqXJsBTIqSjKs9sCTRO/:pm1O76i9DvKiXXuJuEjdoqmTI7jK2sC+
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-786284298-625481688-3210388970-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-786284298-625481688-3210388970-1000_Classes\Local Settings OpenWith.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3908 OpenWith.exe