e68d23feaf21b116b0bdeb7c667f8fb547a58f53437dd9e3f9141b5afc6dddcd | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

sfbrename-...us.exe

windows7-x64

1

sfbrename-...us.exe

windows10-2004-x64

1

sfbrename-...-7.dll

windows7-x64

1

sfbrename-...-7.dll

windows10-2004-x64

1

sfbrename-...-0.dll

windows7-x64

1

sfbrename-...-0.dll

windows10-2004-x64

1

sfbrename-...-0.dll

windows7-x64

1

sfbrename-...-0.dll

windows10-2004-x64

1

sfbrename-...-0.dll

windows7-x64

1

sfbrename-...-0.dll

windows10-2004-x64

1

sfbrename-...-0.dll

windows7-x64

1

sfbrename-...-0.dll

windows10-2004-x64

1

sfbrename-...-2.dll

windows7-x64

1

sfbrename-...-2.dll

windows10-2004-x64

1

sfbrename-...-8.dll

windows7-x64

1

sfbrename-...-8.dll

windows10-2004-x64

1

sfbrename-...-1.dll

windows7-x64

1

sfbrename-...-1.dll

windows10-2004-x64

1

sfbrename-...me.exe

windows7-x64

1

sfbrename-...me.exe

windows10-2004-x64

1

sfbrename-...b1.dll

windows7-x64

1

sfbrename-...b1.dll

windows10-2004-x64

1

Analysis

max time kernel
137s
max time network
137s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
01/09/2024, 15:07

Sharing

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

sfbrename-cli-1.0.0-win64/gdbus.exe

Resource

win7-20240708-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

sfbrename-cli-1.0.0-win64/gdbus.exe

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

sfbrename-cli-1.0.0-win64/libffi-7.dll

Resource

win7-20240708-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

sfbrename-cli-1.0.0-win64/libffi-7.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

sfbrename-cli-1.0.0-win64/libgio-2.0-0.dll

Resource

win7-20240704-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

sfbrename-cli-1.0.0-win64/libgio-2.0-0.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

sfbrename-cli-1.0.0-win64/libglib-2.0-0.dll

Resource

win7-20240705-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral8

Sample

sfbrename-cli-1.0.0-win64/libglib-2.0-0.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

sfbrename-cli-1.0.0-win64/libgmodule-2.0-0.dll

Resource

win7-20240729-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

sfbrename-cli-1.0.0-win64/libgmodule-2.0-0.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

sfbrename-cli-1.0.0-win64/libgobject-2.0-0.dll

Resource

win7-20240705-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

sfbrename-cli-1.0.0-win64/libgobject-2.0-0.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

sfbrename-cli-1.0.0-win64/libiconv-2.dll

Resource

win7-20240708-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

sfbrename-cli-1.0.0-win64/libiconv-2.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

sfbrename-cli-1.0.0-win64/libintl-8.dll

Resource

win7-20240708-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

sfbrename-cli-1.0.0-win64/libintl-8.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

sfbrename-cli-1.0.0-win64/libpcre-1.dll

Resource

win7-20240708-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

sfbrename-cli-1.0.0-win64/libpcre-1.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

sfbrename-cli-1.0.0-win64/sfbrename.exe

Resource

win7-20240704-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

sfbrename-cli-1.0.0-win64/sfbrename.exe

Resource

win10v2004-20240802-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral21

Sample

sfbrename-cli-1.0.0-win64/zlib1.dll

Resource

win7-20240705-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral22

Sample

sfbrename-cli-1.0.0-win64/zlib1.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

sfbrename-cli-1.0.0-win64/libffi-7.dll
Size

29KB
MD5

43c639b6ba8415f94b8fc27a96042650
SHA1

07ed717e5032f2025f759ef484fc25178922768c
SHA256

d07afee9199e6cbf406f7e6a7f9673296bda5244e5ca79a37177226f12801d35
SHA512

eeadc1f19a633ab2b05c4466de6d35cfb7c76a731d8ac23e5cbf7005ed905874c43bfc6f5da9aeeab66aad00584862df691e7ae8e5da805ee1d9608cb6663b0d
SSDEEP

384:PC9/Hckzur4W7phM9EsXbD37e9t8TlfJJD+QiUZ5ZqtIsNYF5VYJO0mnwrRCXWxU:q9UkeXMNXbD37e9LUZfqtkLVYJXuWc

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\sfbrename-cli-1.0.0-win64\libffi-7.dll,#1
1⤵
PID:804

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/804-0-0x00007FFD60180000-0x00007FFD60190000-memory.dmp

Filesize
64KB

Download

© 2018-2025

Terms | Privacy