Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
8Static
static
3Obsidian_6...up.exe
windows10-2004-x64
8$PLUGINSDI...ID.dll
windows10-2004-x64
3$PLUGINSDI...nu.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3$PLUGINSDI...ls.dll
windows10-2004-x64
3Obsidian.exe
windows10-2004-x64
1uninstall.exe
windows10-2004-x64
7$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...ls.dll
windows10-2004-x64
3Analysis
-
max time kernel
84s -
max time network
144s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
11/08/2024, 03:20
Static task
static1
Behavioral task
behavioral1
Sample
Obsidian_6.0.0-beta.2_x64-setup.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral2
Sample
$PLUGINSDIR/ApplicationID.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/StartMenu.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/nsis_tauri_utils.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
Obsidian.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral8
Sample
uninstall.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/nsis_tauri_utils.dll
Resource
win10v2004-20240802-en
General
-
Target
Obsidian.exe
-
Size
10.6MB
-
MD5
fbb36a01bc9d71015a842eb4573a8107
-
SHA1
7938cdea3f5cbe50f4e95fb2faf4985ccb344dab
-
SHA256
b5062a0d25860ebeb99f3b2b2fc53e982cadbb2247725bb0c72e9fd06a55f9ac
-
SHA512
a2baa42010b74a09b633dcfbe81f7cc9c76033603462cbd2344d1d291be30e20132a25a07f08d18c15706388410fdd13a75ef3ec9938209220b71c881071e113
-
SSDEEP
98304:zjC4uKgzCXTVwjwCrCGpISMqYDq7b5NxXYxYqQbchwQ6qxb6FOeVgEtGbxYz+V:MCXJ4xWzSM47tYxY12wigFbZ8++
Malware Config
Signatures
-
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 3476 Obsidian.exe