8e781ea5416de0e510bf1f4bd43f432a8849c058307390e7b95de5d689058268

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

Static

static

Tools/SQLi....5.exe

windows7-x64

Tools/SQLi....5.exe

windows10-2004-x64

Tools/TSP ...or.exe

windows7-x64

Tools/TSP ...or.exe

windows10-2004-x64

Tools/TSP ...be.lnk

windows7-x64

Tools/TSP ...be.lnk

windows10-2004-x64

Tools/WinP..._3.exe

windows7-x64

Tools/WinP..._3.exe

windows10-2004-x64

Tools/prox...le.dll

windows7-x64

Tools/prox...le.dll

windows10-2004-x64

Tools/prox...er.exe

windows7-x64

Tools/prox...er.exe

windows10-2004-x64

Tools/prox...ed.dll

windows7-x64

Tools/prox...ed.dll

windows10-2004-x64

Tools/rdp/...ib.dll

windows7-x64

Tools/rdp/...ib.dll

windows10-2004-x64

Tools/rdp/...5+.exe

windows7-x64

Tools/rdp/...5+.exe

windows10-2004-x64

Tools/rdp/...ib.dll

windows7-x64

Tools/rdp/...ib.dll

windows10-2004-x64

Tools/rdp/...n3.exe

windows7-x64

Tools/rdp/...n3.exe

windows10-2004-x64

Tools/rdp/...e4.dll

windows7-x64

Tools/rdp/...e4.dll

windows10-2004-x64

Tools/rdp/...i4.dll

windows7-x64

Tools/rdp/...i4.dll

windows10-2004-x64

Tools/rdp/...k4.dll

windows7-x64

Tools/rdp/...k4.dll

windows10-2004-x64

Tools/rdp/...rs.exe

windows7-x64

Tools/rdp/...rs.exe

windows10-2004-x64

Tools/rdp/...nt.dll

windows7-x64

Tools/rdp/...nt.dll

windows10-2004-x64

Analysis

max time kernel
119s
max time network
124s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
12/09/2024, 09:05 UTC

Sharing

Copy URL

Twitter E-mail

Static task

static1

pdf link

4 signatures

Behavioral task

behavioral1

Sample

Tools/SQLi_Dumper_v.8.5_Cracked_By_LautheKing/SQLi v.8.5.exe

Resource

win7-20240903-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral2

Sample

Tools/SQLi_Dumper_v.8.5_Cracked_By_LautheKing/SQLi v.8.5.exe

Resource

win10v2004-20240802-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral3

Sample

Tools/TSP Dork generator - by Lh Production/TSP Dork generator.exe

Resource

win7-20240704-en

discovery

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral4

Sample

Tools/TSP Dork generator - by Lh Production/TSP Dork generator.exe

Resource

win10v2004-20240802-en

discovery

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral5

Sample

Tools/TSP Dork generator - by Lh Production/YouTube.lnk

Resource

win7-20240903-en

discovery

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral6

Sample

Tools/TSP Dork generator - by Lh Production/YouTube.lnk

Resource

win10v2004-20240802-en

discovery

windows10-2004-x64

9 signatures

150 seconds

Behavioral task

behavioral7

Sample

Tools/WinPcap_4_1_3.exe

Resource

win7-20240903-en

discovery

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral8

Sample

Tools/WinPcap_4_1_3.exe

Resource

win10v2004-20240802-en

discovery

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

Tools/proxychecker/Colorful.Console.dll

Resource

win7-20240729-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

Tools/proxychecker/Colorful.Console.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

Tools/proxychecker/ProxyChecker.exe

Resource

win7-20240704-en

discovery

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

Tools/proxychecker/ProxyChecker.exe

Resource

win10v2004-20240802-en

discovery

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

Tools/proxychecker/xNet-Ameliorated.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

Tools/proxychecker/xNet-Ameliorated.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

Tools/rdp/RDP Forcer 1.5/AxInterop.MSTSCLib.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

Tools/rdp/RDP Forcer 1.5/AxInterop.MSTSCLib.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

Tools/rdp/RDP Forcer 1.5/ForcerX15+.exe

Resource

win7-20240903-en

discovery

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral18

Sample

Tools/rdp/RDP Forcer 1.5/ForcerX15+.exe

Resource

win10v2004-20240802-en

discovery

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral19

Sample

Tools/rdp/RDP Forcer 1.5/Interop.MSTSCLib.dll

Resource

win7-20240903-en

discovery

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral20

Sample

Tools/rdp/RDP Forcer 1.5/Interop.MSTSCLib.dll

Resource

win10v2004-20240910-en

discovery

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral21

Sample

Tools/rdp/RDP Forcer 1.5/KPortScan 3.0/KPortScan 3.0/KPortScan3.exe

Resource

win7-20240708-en

discovery

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral22

Sample

Tools/rdp/RDP Forcer 1.5/KPortScan 3.0/KPortScan 3.0/KPortScan3.exe

Resource

win10v2004-20240802-en

discovery

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral23

Sample

Tools/rdp/RDP Forcer 1.5/KPortScan 3.0/KPortScan 3.0/QtCore4.dll

Resource

win7-20240708-en

discovery

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral24

Sample

Tools/rdp/RDP Forcer 1.5/KPortScan 3.0/KPortScan 3.0/QtCore4.dll

Resource

win10v2004-20240802-en

discovery

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral25

Sample

Tools/rdp/RDP Forcer 1.5/KPortScan 3.0/KPortScan 3.0/QtGui4.dll

Resource

win7-20240903-en

discovery

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral26

Sample

Tools/rdp/RDP Forcer 1.5/KPortScan 3.0/KPortScan 3.0/QtGui4.dll

Resource

win10v2004-20240802-en

discovery

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral27

Sample

Tools/rdp/RDP Forcer 1.5/KPortScan 3.0/KPortScan 3.0/QtNetwork4.dll

Resource

win7-20240704-en

discovery

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral28

Sample

Tools/rdp/RDP Forcer 1.5/KPortScan 3.0/KPortScan 3.0/QtNetwork4.dll

Resource

win10v2004-20240802-en

discovery

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral29

Sample

Tools/rdp/RDP Forcer 1.5/csrs.exe

Resource

win7-20240903-en

discovery

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral30

Sample

Tools/rdp/RDP Forcer 1.5/csrs.exe

Resource

win10v2004-20240802-en

discovery

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral31

Sample

Tools/rdp/RDP Forcer 1.5/freerdp-client.dll

Resource

win7-20240903-en

discovery

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral32

Sample

Tools/rdp/RDP Forcer 1.5/freerdp-client.dll

Resource

win10v2004-20240802-en

discovery

windows10-2004-x64

3 signatures

150 seconds

Report Analysis Logs

General

Target

Tools/rdp/RDP Forcer 1.5/AxInterop.MSTSCLib.dll
Size

293KB
MD5

0f809467f7e99aa1b6572a9adfdad685
SHA1

f0dc9956841a1df5b8fc006d16a1e21e7687b5dc
SHA256

b9d3566e580ce6ec6fcd77d3bef3912a8e1995cc3dece3178c27c503ef00e495
SHA512

ec1d8259818ff98070ab6fcdbc3329bce51bb68b7c78ac74a0227da44da8a648f481c0e8cb1f18d5002955556e913b371b000acfea57573ec7626c6497e8d972
SSDEEP

6144:xM+MqDWxDTXd01gDbF7r16IFe8IBAHLVuS7YTso1C+cC1Z:xcpZhos

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\Tools\rdp\RDP Forcer 1.5\AxInterop.MSTSCLib.dll",#1
1⤵
PID:2348

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

We care about your privacy.