Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

Balatro.Fr...2P.zip

windows7-x64

1

Balatro.Fr...2P.zip

windows10-2004-x64

1

Balatro.Fr...ro.exe

windows7-x64

1

Balatro.Fr...ro.exe

windows10-2004-x64

1

Balatro.Fr...32.dll

windows7-x64

1

Balatro.Fr...32.dll

windows10-2004-x64

1

Balatro.Fr...L2.dll

windows7-x64

1

Balatro.Fr...L2.dll

windows10-2004-x64

1

Balatro.Fr...OM.txt

windows7-x64

1

Balatro.Fr...OM.txt

windows10-2004-x64

1

Balatro.Fr...ps.dll

windows7-x64

1

Balatro.Fr...ps.dll

windows10-2004-x64

1

Balatro.Fr...se.txt

windows7-x64

1

Balatro.Fr...se.txt

windows10-2004-x64

1

Balatro.Fr...ve.dll

windows7-x64

1

Balatro.Fr...ve.dll

windows10-2004-x64

1

Balatro.Fr...51.dll

windows7-x64

1

Balatro.Fr...51.dll

windows10-2004-x64

1

Balatro.Fr...am.dll

windows7-x64

1

Balatro.Fr...am.dll

windows10-2004-x64

1

Balatro.Fr...23.dll

windows7-x64

1

Balatro.Fr...23.dll

windows10-2004-x64

1

Balatro.Fr...20.dll

windows7-x64

1

Balatro.Fr...20.dll

windows10-2004-x64

1

Balatro.Fr...20.dll

windows7-x64

1

Balatro.Fr...20.dll

windows10-2004-x64

1

Balatro.Fr...me.txt

windows7-x64

1

Balatro.Fr...me.txt

windows10-2004-x64

1

Balatro.Fr...64.dll

windows7-x64

1

Balatro.Fr...64.dll

windows10-2004-x64

1

Balatro.Fr...64.dll

windows7-x64

1

Balatro.Fr...64.dll

windows10-2004-x64

1

Resubmissions

04/09/2024, 06:11

240904-gxmmfsxbjc 3

Analysis

  • max time kernel
    94s
  • max time network
    156s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    04/09/2024, 06:11

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Balatro.Friends of Jimbo-P2P/steam_api64.dll

  • Size

    403KB

  • MD5

    e98e357c5712d35fcf1ae53c99cbc6a9

  • SHA1

    78a4d5818965d4386eca0adcf00ee81788d271ec

  • SHA256

    c269ef26736f907c637ba33f146a318d5e154824c47d3fc8937781ea8829dcc8

  • SHA512

    a3de98def4cf9b1c7c97c0862342b96a3b9c809e8710bf9c265f3a419c009a79f3b2864ed32bd1f98461ac6079a36143bcfda6a3715098f66a89c37ae9e13fe3

  • SSDEEP

    6144:cXdX/P531mK22HF7FZi7JwLBVH6LRXLhcR4W4zCRGqJUZnfsDnssTvYySbfCvRJ:6zIh7+LLwXOuZSGqJCiTAywfCZJ

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 28 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe "C:\Users\Admin\AppData\Local\Temp\Balatro.Friends of Jimbo-P2P\steam_api64.dll",#1
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:2464

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2464-0-0x00007FFA0A200000-0x00007FFA0A313000-memory.dmp

    Filesize

    1.1MB

    Download

  • memory/2464-3-0x00007FFA18CAD000-0x00007FFA18CAE000-memory.dmp

    Filesize

    4KB

    Download

  • memory/2464-5-0x00007FFA18C10000-0x00007FFA18E05000-memory.dmp

    Filesize

    2.0MB

    Download

  • memory/2464-4-0x00007FFA18C10000-0x00007FFA18E05000-memory.dmp

    Filesize

    2.0MB

    Download

  • memory/2464-6-0x00007FFA18C10000-0x00007FFA18E05000-memory.dmp

    Filesize

    2.0MB

    Download

  • memory/2464-7-0x00007FFA18C10000-0x00007FFA18E05000-memory.dmp

    Filesize

    2.0MB

    Download

  • memory/2464-8-0x00007FFA18C10000-0x00007FFA18E05000-memory.dmp

    Filesize

    2.0MB

    Download

  • memory/2464-9-0x00007FFA18C10000-0x00007FFA18E05000-memory.dmp

    Filesize

    2.0MB

    Download