Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
121s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
-
submitted
07/09/2024, 16:57
General
-
Target
lolxc/LOL星辰辅助V9.4【超强脚本+超强躲避】/LOL星辰辅助超强脚本9.4.exe
-
Size
13.9MB
-
MD5
33bce60b3b53716fb12d7731ea5fa5e6
-
SHA1
05c22f10b85c96008f87ff689adcf9b017278084
-
SHA256
a8838e3154fbdf8c0e1cbbb265926d703c90e9064f2e07cccc8cd99dd1b223db
-
SHA512
ab75dcb7d930f9833aa6c9c0b24b20220e296835b0d07f8c8d6bd968ff86298f753b6af2a853b3ecacdcac7590083193b2c8729de29e92beb9f7965aea9e107a
-
SSDEEP
196608:zT4tNUGi3iRO7pjPovaaMV2WFcqlBT9gbD7JVuWGRuGOlO8RZDX9:4TCiR2pr+aaMVbqf7ZTrZDX9
Malware Config
Signatures
-
UPX packed file 23 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
VMProtect packed file 27 IoCs
Detects executables packed with VMProtect commercial packer.
-
System Location Discovery: System Language Discovery 1 TTPs 2 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of SetWindowsHookEx 3 IoCs
-
Suspicious use of WriteProcessMemory 7 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\lolxc\LOL星辰辅助V9.4【超强脚本+超强躲避】\LOL星辰辅助超强脚本9.4.exe"C:\Users\Admin\AppData\Local\Temp\lolxc\LOL星辰辅助V9.4【超强脚本+超强躲避】\LOL星辰辅助超强脚本9.4.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\regsvr32.exeregsvr32 "C:\Users\Admin\AppData\Local\Temp\lolxc\LOL????V9.4?????+?????\XC.dll" /s2⤵
- System Location Discovery: System Language Discovery
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
14.1MB
-
Filesize
872KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
14.1MB
-
Filesize
80KB
-
Filesize
524KB
-
Filesize
14.1MB
-
Filesize
14.1MB
-
Filesize
14.1MB
-
Filesize
14.1MB
-
Filesize
14.1MB
-
Filesize
14.1MB
-
Filesize
14.1MB
-
Filesize
14.1MB
-
Filesize
14.1MB
-
Filesize
14.1MB
-
Filesize
14.1MB
-
Filesize
14.1MB
-
Filesize
14.1MB
-
Filesize
14.1MB
-
Filesize
14.1MB
-
Filesize
14.1MB
-
Filesize
14.1MB
-
Filesize
14.1MB
-
Filesize
14.1MB
-
Filesize
14.1MB
-
Filesize
14.1MB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
14.1MB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
14.1MB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
14.1MB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
14.1MB