Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

Cutter-v2....te.dll

windows7-x64

1

Cutter-v2....te.dll

windows10-2004-x64

1

Cutter-v2....ra.dll

windows7-x64

1

Cutter-v2....ra.dll

windows10-2004-x64

1

Cutter-v2....ft.dll

windows7-x64

1

Cutter-v2....ft.dll

windows10-2004-x64

1

Cutter-v2....GL.dll

windows7-x64

1

Cutter-v2....GL.dll

windows10-2004-x64

1

Cutter-v2....v2.dll

windows7-x64

1

Cutter-v2....v2.dll

windows10-2004-x64

1

Cutter-v2....in.dll

windows7-x64

1

Cutter-v2....in.dll

windows10-2004-x64

1

Cutter-v2....er.dll

windows7-x64

1

Cutter-v2....er.dll

windows10-2004-x64

1

Cutter-v2....i3.dll

windows7-x64

1

Cutter-v2....i3.dll

windows10-2004-x64

1

Cutter-v2....n3.dll

windows7-x64

1

Cutter-v2....n3.dll

windows10-2004-x64

1

Cutter-v2....37.dll

windows7-x64

1

Cutter-v2....37.dll

windows10-2004-x64

1

Cutter-v2....io.dll

windows7-x64

1

Cutter-v2....io.dll

windows10-2004-x64

1

Cutter-v2....z2.dll

windows7-x64

1

Cutter-v2....z2.dll

windows10-2004-x64

1

Cutter-v2....es.dll

windows7-x64

1

Cutter-v2....es.dll

windows10-2004-x64

1

Cutter-v2....al.dll

windows7-x64

1

Cutter-v2....al.dll

windows10-2004-x64

1

Cutter-v2....ee.dll

windows7-x64

1

Cutter-v2....ee.dll

windows10-2004-x64

1

Cutter-v2....ib.dll

windows7-x64

1

Cutter-v2....ib.dll

windows10-2004-x64

1

Analysis

  • max time kernel
    119s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    12/10/2024, 10:21

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Cutter-v2.3.4-Windows-x86_64/lib/rizin/plugins/swift.dll

  • Size

    199KB

  • MD5

    0b0946151091b73f5f7671d5843081d5

  • SHA1

    dfde7f03559a0580d0c6f3950f54f69e4cc7583e

  • SHA256

    5b64a3593183114ebecdf6e63d80fac773b3bf3018394a821fce0276e3c99e54

  • SHA512

    346f924b9f82462dbed1dbf8ff92fd99db8e139c3be2f1d8d2817c53481a630d65a038379148bd0e5e8e2f87daf4767d36eb3b5147aa922f1da0e93ebfafb2f7

  • SSDEEP

    3072:vYzpw3H/bA0tWFNdYPI3rL2lrrpn3F9C/+n8MgwuPu:vYdw3f80tWFNdWIbLqrh19C/fwuPu

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\Cutter-v2.3.4-Windows-x86_64\lib\rizin\plugins\swift.dll,#1
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2320
    • C:\Windows\system32\WerFault.exe
      C:\Windows\system32\WerFault.exe -u -p 2320 -s 80
      2⤵
        PID:2400

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads