8e781ea5416de0e510bf1f4bd43f432a8849c058307390e7b95de5d689058268

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

Static

static

Tools/SQLi....5.exe

windows7-x64

Tools/SQLi....5.exe

windows10-2004-x64

Tools/TSP ...or.exe

windows7-x64

Tools/TSP ...or.exe

windows10-2004-x64

Tools/TSP ...be.lnk

windows7-x64

Tools/TSP ...be.lnk

windows10-2004-x64

Tools/WinP..._3.exe

windows7-x64

Tools/WinP..._3.exe

windows10-2004-x64

Tools/prox...le.dll

windows7-x64

Tools/prox...le.dll

windows10-2004-x64

Tools/prox...er.exe

windows7-x64

Tools/prox...er.exe

windows10-2004-x64

Tools/prox...ed.dll

windows7-x64

Tools/prox...ed.dll

windows10-2004-x64

Tools/rdp/...ib.dll

windows7-x64

Tools/rdp/...ib.dll

windows10-2004-x64

Tools/rdp/...5+.exe

windows7-x64

Tools/rdp/...5+.exe

windows10-2004-x64

Tools/rdp/...ib.dll

windows7-x64

Tools/rdp/...ib.dll

windows10-2004-x64

Tools/rdp/...n3.exe

windows7-x64

Tools/rdp/...n3.exe

windows10-2004-x64

Tools/rdp/...e4.dll

windows7-x64

Tools/rdp/...e4.dll

windows10-2004-x64

Tools/rdp/...i4.dll

windows7-x64

Tools/rdp/...i4.dll

windows10-2004-x64

Tools/rdp/...k4.dll

windows7-x64

Tools/rdp/...k4.dll

windows10-2004-x64

Tools/rdp/...rs.exe

windows7-x64

Tools/rdp/...rs.exe

windows10-2004-x64

Tools/rdp/...nt.dll

windows7-x64

Tools/rdp/...nt.dll

windows10-2004-x64

Analysis

max time kernel
120s
max time network
125s
platform
windows7_x64
resource
win7-20240729-en
resource tags

arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
submitted
12/09/2024, 09:05

Sharing

Copy URL

Twitter E-mail

Static task

static1

pdf link

4 signatures

Behavioral task

behavioral1

Sample

Tools/SQLi_Dumper_v.8.5_Cracked_By_LautheKing/SQLi v.8.5.exe

Resource

win7-20240903-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral2

Sample

Tools/SQLi_Dumper_v.8.5_Cracked_By_LautheKing/SQLi v.8.5.exe

Resource

win10v2004-20240802-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral3

Sample

Tools/TSP Dork generator - by Lh Production/TSP Dork generator.exe

Resource

win7-20240704-en

discovery

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral4

Sample

Tools/TSP Dork generator - by Lh Production/TSP Dork generator.exe

Resource

win10v2004-20240802-en

discovery

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral5

Sample

Tools/TSP Dork generator - by Lh Production/YouTube.lnk

Resource

win7-20240903-en

discovery

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral6

Sample

Tools/TSP Dork generator - by Lh Production/YouTube.lnk

Resource

win10v2004-20240802-en

discovery

windows10-2004-x64

9 signatures

150 seconds

Behavioral task

behavioral7

Sample

Tools/WinPcap_4_1_3.exe

Resource

win7-20240903-en

discovery

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral8

Sample

Tools/WinPcap_4_1_3.exe

Resource

win10v2004-20240802-en

discovery

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

Tools/proxychecker/Colorful.Console.dll

Resource

win7-20240729-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

Tools/proxychecker/Colorful.Console.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

Tools/proxychecker/ProxyChecker.exe

Resource

win7-20240704-en

discovery

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

Tools/proxychecker/ProxyChecker.exe

Resource

win10v2004-20240802-en

discovery

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

Tools/proxychecker/xNet-Ameliorated.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

Tools/proxychecker/xNet-Ameliorated.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

Tools/rdp/RDP Forcer 1.5/AxInterop.MSTSCLib.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

Tools/rdp/RDP Forcer 1.5/AxInterop.MSTSCLib.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

Tools/rdp/RDP Forcer 1.5/ForcerX15+.exe

Resource

win7-20240903-en

discovery

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral18

Sample

Tools/rdp/RDP Forcer 1.5/ForcerX15+.exe

Resource

win10v2004-20240802-en

discovery

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral19

Sample

Tools/rdp/RDP Forcer 1.5/Interop.MSTSCLib.dll

Resource

win7-20240903-en

discovery

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral20

Sample

Tools/rdp/RDP Forcer 1.5/Interop.MSTSCLib.dll

Resource

win10v2004-20240910-en

discovery

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral21

Sample

Tools/rdp/RDP Forcer 1.5/KPortScan 3.0/KPortScan 3.0/KPortScan3.exe

Resource

win7-20240708-en

discovery

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral22

Sample

Tools/rdp/RDP Forcer 1.5/KPortScan 3.0/KPortScan 3.0/KPortScan3.exe

Resource

win10v2004-20240802-en

discovery

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral23

Sample

Tools/rdp/RDP Forcer 1.5/KPortScan 3.0/KPortScan 3.0/QtCore4.dll

Resource

win7-20240708-en

discovery

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral24

Sample

Tools/rdp/RDP Forcer 1.5/KPortScan 3.0/KPortScan 3.0/QtCore4.dll

Resource

win10v2004-20240802-en

discovery

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral25

Sample

Tools/rdp/RDP Forcer 1.5/KPortScan 3.0/KPortScan 3.0/QtGui4.dll

Resource

win7-20240903-en

discovery

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral26

Sample

Tools/rdp/RDP Forcer 1.5/KPortScan 3.0/KPortScan 3.0/QtGui4.dll

Resource

win10v2004-20240802-en

discovery

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral27

Sample

Tools/rdp/RDP Forcer 1.5/KPortScan 3.0/KPortScan 3.0/QtNetwork4.dll

Resource

win7-20240704-en

discovery

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral28

Sample

Tools/rdp/RDP Forcer 1.5/KPortScan 3.0/KPortScan 3.0/QtNetwork4.dll

Resource

win10v2004-20240802-en

discovery

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral29

Sample

Tools/rdp/RDP Forcer 1.5/csrs.exe

Resource

win7-20240903-en

discovery

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral30

Sample

Tools/rdp/RDP Forcer 1.5/csrs.exe

Resource

win10v2004-20240802-en

discovery

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral31

Sample

Tools/rdp/RDP Forcer 1.5/freerdp-client.dll

Resource

win7-20240903-en

discovery

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral32

Sample

Tools/rdp/RDP Forcer 1.5/freerdp-client.dll

Resource

win10v2004-20240802-en

discovery

windows10-2004-x64

3 signatures

150 seconds

Report Analysis Logs

General

Target

Tools/proxychecker/Colorful.Console.dll
Size

88KB
MD5

5f3d2cfbc21591b8feef1efa3e59a4d0
SHA1

15d1ad963a13b6c8ae28c26e7dc1cc3da2bc3bb8
SHA256

f31d4fd7e729fc6cf4ecab972b6b1ee897918a325b1ca572030966f831e768fb
SHA512

05135188c3b75cf642e4e1e833d01c24d2ce2c2b1ae71b0edf048e453a4716226d7af582365d2f6ab803b4b0fe83ce67d4c39125963fc50d597c30e56ae74a2f
SSDEEP

1536:hLeJYLqthWMjfBiRlijZFgWHdQe9nLClbWG:hxLqtQMv7d9nLqCG

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\Tools\proxychecker\Colorful.Console.dll,#1
1⤵
PID:2772

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads