Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
6Static
static
3BACKUPME.bat
windows7-x64
1BACKUPME.bat
windows10-2004-x64
1DEBUG.vbs
windows7-x64
1DEBUG.vbs
windows10-2004-x64
1DXClipCTRL.vbs
windows7-x64
1DXClipCTRL.vbs
windows10-2004-x64
1DXFightCTRL.vbs
windows7-x64
1DXFightCTRL.vbs
windows10-2004-x64
1DXGame.dll
windows7-x64
3DXGame.dll
windows10-2004-x64
3DXInput.vbs
windows7-x64
1DXInput.vbs
windows10-2004-x64
1DXMovie2CTRL.vbs
windows7-x64
1DXMovie2CTRL.vbs
windows10-2004-x64
1DXMovieCTRL.vbs
windows7-x64
1DXMovieCTRL.vbs
windows10-2004-x64
1DXMovieStruct.vbs
windows7-x64
1DXMovieStruct.vbs
windows10-2004-x64
1DXScreen.vbs
windows7-x64
1DXScreen.vbs
windows10-2004-x64
1DXScreen.vbs
windows7-x64
1DXScreen.vbs
windows10-2004-x64
1DXSfcCTRL.vbs
windows7-x64
1DXSfcCTRL.vbs
windows10-2004-x64
1DXSound.vbs
windows7-x64
1DXSound.vbs
windows10-2004-x64
1DXStoryCTRL.vbs
windows7-x64
1DXStoryCTRL.vbs
windows10-2004-x64
1DXWordCTRL.vbs
windows7-x64
1DXWordCTRL.vbs
windows10-2004-x64
1LOADER.exe
windows7-x64
6LOADER.exe
windows10-2004-x64
6Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
20/08/2024, 10:11
Static task
static1
Behavioral task
behavioral1
Sample
BACKUPME.bat
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
BACKUPME.bat
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
DEBUG.vbs
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
DEBUG.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
DXClipCTRL.vbs
Resource
win7-20240704-en
Behavioral task
behavioral6
Sample
DXClipCTRL.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
DXFightCTRL.vbs
Resource
win7-20240705-en
Behavioral task
behavioral8
Sample
DXFightCTRL.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
DXGame.dll
Resource
win7-20240704-en
Behavioral task
behavioral10
Sample
DXGame.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
DXInput.vbs
Resource
win7-20240704-en
Behavioral task
behavioral12
Sample
DXInput.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
DXMovie2CTRL.vbs
Resource
win7-20240708-en
Behavioral task
behavioral14
Sample
DXMovie2CTRL.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
DXMovieCTRL.vbs
Resource
win7-20240704-en
Behavioral task
behavioral16
Sample
DXMovieCTRL.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
DXMovieStruct.vbs
Resource
win7-20240705-en
Behavioral task
behavioral18
Sample
DXMovieStruct.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
DXScreen.vbs
Resource
win7-20240729-en
Behavioral task
behavioral20
Sample
DXScreen.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
DXScreen.vbs
Resource
win7-20240708-en
Behavioral task
behavioral22
Sample
DXScreen.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
DXSfcCTRL.vbs
Resource
win7-20240708-en
Behavioral task
behavioral24
Sample
DXSfcCTRL.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
DXSound.vbs
Resource
win7-20240704-en
Behavioral task
behavioral26
Sample
DXSound.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
DXStoryCTRL.vbs
Resource
win7-20240729-en
Behavioral task
behavioral28
Sample
DXStoryCTRL.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
DXWordCTRL.vbs
Resource
win7-20240708-en
Behavioral task
behavioral30
Sample
DXWordCTRL.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
LOADER.exe
Resource
win7-20240705-en
Behavioral task
behavioral32
Sample
LOADER.exe
Resource
win10v2004-20240802-en
General
-
Target
BACKUPME.bat
-
Size
48B
-
MD5
4bb749ccd5b39170b7958733fec0bfeb
-
SHA1
215bc0ab891ce4040a66d52fddb45c990b571574
-
SHA256
736096e90dffd4530157927ea107b004aefe9861fac8fec42480d6437ee80860
-
SHA512
b7d09681be055994c6f3e8f579684890c390a453e1ef6f10c4f4f776779a6c0a96f633a1a2395a31bffedf569b0292c59bb283f22cdec7d4f5fdc94df1a3bb82
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 2740 wrote to memory of 2808 2740 cmd.exe 32 PID 2740 wrote to memory of 2808 2740 cmd.exe 32 PID 2740 wrote to memory of 2808 2740 cmd.exe 32