Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    148s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    14/08/2024, 21:32

General

  • Target

    BlitzedV12/BlitzedGrabberV12.exe

  • Size

    1.9MB

  • MD5

    006cd7ac7f04dfecdb6c58c9e380aca0

  • SHA1

    fd06e16fd731dacb516a945a6cb619b30ecf7ff4

  • SHA256

    b0ec85887a9ad75110914916ab2a2d45487e4b65713d4272c050430d80665e64

  • SHA512

    47014779312ec5d9481a3c2c97d7e48884e8f61b7a03ee980c2b40fb9e32cfa078554abc45b67d04f6786d2013b0cec0d8be700bda150990f7c44dc6469bef09

  • SSDEEP

    49152:MmAznU4n9t2ELj18p4BDifoM83ig9Apl14yG:z49wi73fWc

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Obfuscated with Agile.Net obfuscator 33 IoCs

    Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\BlitzedV12\BlitzedGrabberV12.exe
    "C:\Users\Admin\AppData\Local\Temp\BlitzedV12\BlitzedGrabberV12.exe"
    1⤵
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    • Suspicious use of SetWindowsHookEx
    PID:2252

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\BlitzedV12\BlitzedGrabberV12.exe.Config

    Filesize

    320B

    MD5

    c6e6fc3cdec0ad213d9330a9b630fd5c

    SHA1

    ed4278e0e4b9d1b47fbe92ca2f98af62e5d6c027

    SHA256

    96c2db8d8037a20cc6550c935f9a11da70f84a2bc64a1be1807b06bc1bda2492

    SHA512

    37ee70ae328547b684db668ce59c9f7eea672184fb1f5ed41341a0fab84bbe0419f0706742832fc6f1ae78e474cd1d3f5f757fc9c44ed0ca557101a733532e0f

  • C:\Users\Admin\AppData\Local\Temp\dcfb00f9-5ae7-4197-ba59-e48107e40d35\GunaDotNetRT.dll

    Filesize

    136KB

    MD5

    9af5eb006bb0bab7f226272d82c896c7

    SHA1

    c2a5bb42a5f08f4dc821be374b700652262308f0

    SHA256

    77dc05a6bda90757f66552ee3f469b09f1e00732b4edca0f542872fb591ed9db

    SHA512

    7badd41be4c1039302fda9bba19d374ec9446ce24b7db33b66bee4ef38180d1abcd666d2aea468e7e452aa1e1565eedfefed582bf1c2fe477a4171d99d48772a

  • memory/2252-0-0x0000000074E7E000-0x0000000074E7F000-memory.dmp

    Filesize

    4KB

  • memory/2252-1-0x0000000000E00000-0x0000000000FF0000-memory.dmp

    Filesize

    1.9MB

  • memory/2252-2-0x0000000006140000-0x00000000066E4000-memory.dmp

    Filesize

    5.6MB

  • memory/2252-3-0x00000000059C0000-0x0000000005A52000-memory.dmp

    Filesize

    584KB

  • memory/2252-4-0x00000000059A0000-0x00000000059AA000-memory.dmp

    Filesize

    40KB

  • memory/2252-5-0x0000000074E70000-0x0000000075620000-memory.dmp

    Filesize

    7.7MB

  • memory/2252-6-0x0000000005D80000-0x0000000005F72000-memory.dmp

    Filesize

    1.9MB

  • memory/2252-22-0x0000000005D80000-0x0000000005F6E000-memory.dmp

    Filesize

    1.9MB

  • memory/2252-31-0x0000000071570000-0x00000000715A7000-memory.dmp

    Filesize

    220KB

  • memory/2252-43-0x0000000005D80000-0x0000000005F6E000-memory.dmp

    Filesize

    1.9MB

  • memory/2252-75-0x0000000005D80000-0x0000000005F6E000-memory.dmp

    Filesize

    1.9MB

  • memory/2252-77-0x0000000005D80000-0x0000000005F6E000-memory.dmp

    Filesize

    1.9MB

  • memory/2252-71-0x0000000005D80000-0x0000000005F6E000-memory.dmp

    Filesize

    1.9MB

  • memory/2252-69-0x0000000005D80000-0x0000000005F6E000-memory.dmp

    Filesize

    1.9MB

  • memory/2252-67-0x0000000005D80000-0x0000000005F6E000-memory.dmp

    Filesize

    1.9MB

  • memory/2252-63-0x0000000005D80000-0x0000000005F6E000-memory.dmp

    Filesize

    1.9MB

  • memory/2252-61-0x0000000005D80000-0x0000000005F6E000-memory.dmp

    Filesize

    1.9MB

  • memory/2252-59-0x0000000005D80000-0x0000000005F6E000-memory.dmp

    Filesize

    1.9MB

  • memory/2252-57-0x0000000005D80000-0x0000000005F6E000-memory.dmp

    Filesize

    1.9MB

  • memory/2252-55-0x0000000005D80000-0x0000000005F6E000-memory.dmp

    Filesize

    1.9MB

  • memory/2252-73-0x0000000005D80000-0x0000000005F6E000-memory.dmp

    Filesize

    1.9MB

  • memory/2252-65-0x0000000005D80000-0x0000000005F6E000-memory.dmp

    Filesize

    1.9MB

  • memory/2252-53-0x0000000005D80000-0x0000000005F6E000-memory.dmp

    Filesize

    1.9MB

  • memory/2252-51-0x0000000005D80000-0x0000000005F6E000-memory.dmp

    Filesize

    1.9MB

  • memory/2252-47-0x0000000005D80000-0x0000000005F6E000-memory.dmp

    Filesize

    1.9MB

  • memory/2252-45-0x0000000005D80000-0x0000000005F6E000-memory.dmp

    Filesize

    1.9MB

  • memory/2252-39-0x0000000005D80000-0x0000000005F6E000-memory.dmp

    Filesize

    1.9MB

  • memory/2252-37-0x0000000005D80000-0x0000000005F6E000-memory.dmp

    Filesize

    1.9MB

  • memory/2252-35-0x0000000005D80000-0x0000000005F6E000-memory.dmp

    Filesize

    1.9MB

  • memory/2252-33-0x0000000005D80000-0x0000000005F6E000-memory.dmp

    Filesize

    1.9MB

  • memory/2252-49-0x0000000005D80000-0x0000000005F6E000-memory.dmp

    Filesize

    1.9MB

  • memory/2252-41-0x0000000005D80000-0x0000000005F6E000-memory.dmp

    Filesize

    1.9MB

  • memory/2252-30-0x0000000005D80000-0x0000000005F6E000-memory.dmp

    Filesize

    1.9MB

  • memory/2252-28-0x0000000005D80000-0x0000000005F6E000-memory.dmp

    Filesize

    1.9MB

  • memory/2252-26-0x0000000005D80000-0x0000000005F6E000-memory.dmp

    Filesize

    1.9MB

  • memory/2252-24-0x0000000005D80000-0x0000000005F6E000-memory.dmp

    Filesize

    1.9MB

  • memory/2252-18-0x0000000005D80000-0x0000000005F6E000-memory.dmp

    Filesize

    1.9MB

  • memory/2252-16-0x0000000005D80000-0x0000000005F6E000-memory.dmp

    Filesize

    1.9MB

  • memory/2252-15-0x0000000005D80000-0x0000000005F6E000-memory.dmp

    Filesize

    1.9MB

  • memory/2252-14-0x0000000073880000-0x0000000073909000-memory.dmp

    Filesize

    548KB

  • memory/2252-20-0x0000000005D80000-0x0000000005F6E000-memory.dmp

    Filesize

    1.9MB

  • memory/2252-11670-0x0000000006B90000-0x0000000006C2C000-memory.dmp

    Filesize

    624KB

  • memory/2252-11671-0x0000000074E70000-0x0000000075620000-memory.dmp

    Filesize

    7.7MB

  • memory/2252-11672-0x0000000074E70000-0x0000000075620000-memory.dmp

    Filesize

    7.7MB

  • memory/2252-11673-0x0000000074E70000-0x0000000075620000-memory.dmp

    Filesize

    7.7MB

  • memory/2252-11681-0x0000000074E70000-0x0000000075620000-memory.dmp

    Filesize

    7.7MB

  • memory/2252-11682-0x0000000074E7E000-0x0000000074E7F000-memory.dmp

    Filesize

    4KB

  • memory/2252-11683-0x0000000074E70000-0x0000000075620000-memory.dmp

    Filesize

    7.7MB

  • memory/2252-11684-0x0000000071570000-0x00000000715A7000-memory.dmp

    Filesize

    220KB

  • memory/2252-11685-0x0000000074E70000-0x0000000075620000-memory.dmp

    Filesize

    7.7MB