Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    90s
  • max time network
    134s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19/09/2024, 02:27

General

  • Target

    NETFLIX Checker Account By X-KILLER/._cache_NETFLIX Checker Account By X-KILLER.exe

  • Size

    538KB

  • MD5

    867f1fbc0a5d89a100d4fe867fa4b34f

  • SHA1

    a41eb575ac101f0954d074932eebcd916ce0023b

  • SHA256

    e22c7f85f00cc4a5219d23ead9ae28897ebea30d09b39387456c1f4fd4541ce5

  • SHA512

    6e71eae56d521d0f62abf605f7181bee429e878aa96853e8e95e0512bb2f5a1c93191ab9afbaf3409d61f78ee4decb6581c7764daaa53bc35ad4c1c77b9ecbfa

  • SSDEEP

    12288:dyqVfhoCeZzPde+4ZJwpBeV8Agn+X+n9B5tLA1zXKZrnkRkEp:dyq4CeZTdp4ZJSK2i+n9B5t0Ag

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 32 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\NETFLIX Checker Account By X-KILLER\._cache_NETFLIX Checker Account By X-KILLER.exe
    "C:\Users\Admin\AppData\Local\Temp\NETFLIX Checker Account By X-KILLER\._cache_NETFLIX Checker Account By X-KILLER.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:2332

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\SkinSoft\VisualStyler\2.3.5.0\x64\ssapihook.dll

    Filesize

    66KB

    MD5

    c74d260d388f5ac3d95d8c1c3a27c989

    SHA1

    5da009086036004a7c670d608d5e1e923aead568

    SHA256

    dc1bebb8ce88d59e4b3130c1ff2c4b7f5df2701c7a71b476b8a6f2ed541db628

    SHA512

    6460db8f73806017d267c0e4e112902956a3bc53853c6a893cff66fe44772305b2c158ef8b58e993806d713aceaddcf2efa7ccf625063678444d3fd20b10546a

  • memory/2332-17-0x00007FFE47CC0000-0x00007FFE47CC1000-memory.dmp

    Filesize

    4KB

  • memory/2332-28-0x00007FFEA9F40000-0x00007FFEAAA01000-memory.dmp

    Filesize

    10.8MB

  • memory/2332-3-0x0000000000CA0000-0x0000000000CC4000-memory.dmp

    Filesize

    144KB

  • memory/2332-4-0x0000000000C70000-0x0000000000C76000-memory.dmp

    Filesize

    24KB

  • memory/2332-5-0x000000001B990000-0x000000001BA88000-memory.dmp

    Filesize

    992KB

  • memory/2332-6-0x00007FFEA9F40000-0x00007FFEAAA01000-memory.dmp

    Filesize

    10.8MB

  • memory/2332-1-0x0000000000350000-0x00000000003DC000-memory.dmp

    Filesize

    560KB

  • memory/2332-11-0x00007FFE47C90000-0x00007FFE47C91000-memory.dmp

    Filesize

    4KB

  • memory/2332-12-0x00007FFE47C80000-0x00007FFE47C81000-memory.dmp

    Filesize

    4KB

  • memory/2332-13-0x00007FFE45730000-0x00007FFE45731000-memory.dmp

    Filesize

    4KB

  • memory/2332-14-0x00007FFE47CA0000-0x00007FFE47CA1000-memory.dmp

    Filesize

    4KB

  • memory/2332-18-0x00007FFE47CD0000-0x00007FFE47CD1000-memory.dmp

    Filesize

    4KB

  • memory/2332-2-0x00000000025A0000-0x000000000264E000-memory.dmp

    Filesize

    696KB

  • memory/2332-16-0x00007FFE47D20000-0x00007FFE47D21000-memory.dmp

    Filesize

    4KB

  • memory/2332-15-0x00007FFE47CB0000-0x00007FFE47CB1000-memory.dmp

    Filesize

    4KB

  • memory/2332-19-0x00007FFE47CF0000-0x00007FFE47CF1000-memory.dmp

    Filesize

    4KB

  • memory/2332-20-0x00007FFE47D00000-0x00007FFE47D01000-memory.dmp

    Filesize

    4KB

  • memory/2332-21-0x00007FFE47CE0000-0x00007FFE47CE1000-memory.dmp

    Filesize

    4KB

  • memory/2332-22-0x00007FFE47D10000-0x00007FFE47D11000-memory.dmp

    Filesize

    4KB

  • memory/2332-23-0x00007FFE47D30000-0x00007FFE47D31000-memory.dmp

    Filesize

    4KB

  • memory/2332-24-0x00007FFE43150000-0x00007FFE43151000-memory.dmp

    Filesize

    4KB

  • memory/2332-25-0x00007FFE431A0000-0x00007FFE431A1000-memory.dmp

    Filesize

    4KB

  • memory/2332-26-0x00007FFE431B0000-0x00007FFE431B1000-memory.dmp

    Filesize

    4KB

  • memory/2332-27-0x00007FFEA9F40000-0x00007FFEAAA01000-memory.dmp

    Filesize

    10.8MB

  • memory/2332-0-0x00007FFEA9F43000-0x00007FFEA9F45000-memory.dmp

    Filesize

    8KB

  • memory/2332-29-0x00007FFEA9F43000-0x00007FFEA9F45000-memory.dmp

    Filesize

    8KB

  • memory/2332-30-0x00007FFEA9F40000-0x00007FFEAAA01000-memory.dmp

    Filesize

    10.8MB