Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
124s -
max time network
129s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
06/09/2024, 11:57
Behavioral task
behavioral1
Sample
New folder (5)/Loader/Gui Connect.js
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
New folder (5)/Loader/Gui Connect.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
New folder (5)/QllzgR.dll
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
New folder (5)/QllzgR.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
New folder (5)/Skin Changer.exe
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
New folder (5)/Skin Changer.exe
Resource
win10v2004-20240802-en
General
-
Target
New folder (5)/QllzgR.dll
-
Size
3KB
-
MD5
5734a9c64b0aae83857da23546b17ac5
-
SHA1
4bdc872a44c77d31cbc591ea9076be485e71f1a8
-
SHA256
ea315df17400825437b2e8eb16d1fd7382fa6f7c27a6d6cddd9970fcfc60df68
-
SHA512
6dc5ae0971a308f1d2d9960d9a682fe34512e70a63e605371f8fb45c9418f1757993ff093e691ddaed680039fb718c69d92c47581ed1a4cea2b5e0ad0d54555b
Malware Config
Signatures
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe "C:\Users\Admin\AppData\Local\Temp\New folder (5)\QllzgR.dll",#11⤵PID:3320
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=3976,i,9445584274764997943,12714240264001792460,262144 --variations-seed-version --mojo-platform-channel-handle=4156 /prefetch:81⤵PID:944