Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
3Static
static
1RoPro.rar
windows7-x64
3RoPro.rar
windows10-2004-x64
3RoPro/_loc...s.json
windows7-x64
3RoPro/_loc...s.json
windows10-2004-x64
3RoPro/_loc...s.json
windows7-x64
3RoPro/_loc...s.json
windows10-2004-x64
3RoPro/_loc...s.json
windows7-x64
3RoPro/_loc...s.json
windows10-2004-x64
3RoPro/_loc...s.json
windows7-x64
3RoPro/_loc...s.json
windows10-2004-x64
3RoPro/_loc...s.json
windows7-x64
3RoPro/_loc...s.json
windows10-2004-x64
3RoPro/_loc...s.json
windows7-x64
3RoPro/_loc...s.json
windows10-2004-x64
3RoPro/_loc...s.json
windows7-x64
3RoPro/_loc...s.json
windows10-2004-x64
3RoPro/_loc...s.json
windows7-x64
3RoPro/_loc...s.json
windows10-2004-x64
3RoPro/_loc...s.json
windows7-x64
3RoPro/_loc...s.json
windows10-2004-x64
3RoPro/_loc...s.json
windows7-x64
3RoPro/_loc...s.json
windows10-2004-x64
3RoPro/_loc...s.json
windows7-x64
3RoPro/_loc...s.json
windows10-2004-x64
3RoPro/_loc...s.json
windows7-x64
3RoPro/_loc...s.json
windows10-2004-x64
3RoPro/_loc...s.json
windows7-x64
3RoPro/_loc...s.json
windows10-2004-x64
3RoPro/_loc...s.json
windows7-x64
3RoPro/_loc...s.json
windows10-2004-x64
3RoPro/_loc...s.json
windows7-x64
3RoPro/_loc...s.json
windows10-2004-x64
3Analysis
-
max time kernel
148s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
18/08/2024, 15:19
Static task
static1
Behavioral task
behavioral1
Sample
RoPro.rar
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
RoPro.rar
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
RoPro/_locales/am/messages.json
Resource
win7-20240705-en
Behavioral task
behavioral4
Sample
RoPro/_locales/am/messages.json
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
RoPro/_locales/ar/messages.json
Resource
win7-20240704-en
Behavioral task
behavioral6
Sample
RoPro/_locales/ar/messages.json
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
RoPro/_locales/ar_EG/messages.json
Resource
win7-20240704-en
Behavioral task
behavioral8
Sample
RoPro/_locales/ar_EG/messages.json
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
RoPro/_locales/be/messages.json
Resource
win7-20240729-en
Behavioral task
behavioral10
Sample
RoPro/_locales/be/messages.json
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
RoPro/_locales/bg/messages.json
Resource
win7-20240708-en
Behavioral task
behavioral12
Sample
RoPro/_locales/bg/messages.json
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
RoPro/_locales/bn/messages.json
Resource
win7-20240729-en
Behavioral task
behavioral14
Sample
RoPro/_locales/bn/messages.json
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
RoPro/_locales/ca/messages.json
Resource
win7-20240705-en
Behavioral task
behavioral16
Sample
RoPro/_locales/ca/messages.json
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
RoPro/_locales/cs/messages.json
Resource
win7-20240704-en
Behavioral task
behavioral18
Sample
RoPro/_locales/cs/messages.json
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
RoPro/_locales/da/messages.json
Resource
win7-20240729-en
Behavioral task
behavioral20
Sample
RoPro/_locales/da/messages.json
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
RoPro/_locales/de/messages.json
Resource
win7-20240708-en
Behavioral task
behavioral22
Sample
RoPro/_locales/de/messages.json
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
RoPro/_locales/de_CH/messages.json
Resource
win7-20240705-en
Behavioral task
behavioral24
Sample
RoPro/_locales/de_CH/messages.json
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
RoPro/_locales/el/messages.json
Resource
win7-20240729-en
Behavioral task
behavioral26
Sample
RoPro/_locales/el/messages.json
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
RoPro/_locales/en/messages.json
Resource
win7-20240704-en
Behavioral task
behavioral28
Sample
RoPro/_locales/en/messages.json
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
RoPro/_locales/en_GB/messages.json
Resource
win7-20240704-en
Behavioral task
behavioral30
Sample
RoPro/_locales/en_GB/messages.json
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
RoPro/_locales/en_PH/messages.json
Resource
win7-20240708-en
Behavioral task
behavioral32
Sample
RoPro/_locales/en_PH/messages.json
Resource
win10v2004-20240802-en
General
-
Target
RoPro.rar
-
Size
3.2MB
-
MD5
e87146d96ec227fb83a650ca9a32a3a6
-
SHA1
c22088e094c80ec33a4d4c836727e174ae2efb66
-
SHA256
35b25eed9892d97ec680f80bd0c4d8c7099664ea5cd3949cb6b214b7f15b75d5
-
SHA512
a119ff621047f1b09ec6ae30da91f86c865af8ab8c6d936c0140e7d100291bfc03c8b4d408bd6a6756fba92bc19922724cc1b243381c67ea6bd28a585a601123
-
SSDEEP
98304:TgwqvBteriJo8DXSk0QK3RQDye/YQXo/BBgz+JOBuFR:G50Ov0QkWo/Qz+Acv
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-786284298-625481688-3210388970-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-786284298-625481688-3210388970-1000_Classes\Local Settings OpenWith.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3192 OpenWith.exe