8a30778288d5c28cfcfdc8811153b9ef192da7e65f6614432d37e1898cd8b7a3 | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

DDLC_russi....2.exe

windows7-x64

7

DDLC_russi....2.exe

windows10-2004-x64

7

$PLUGINSDI...al.ini

windows7-x64

1

$PLUGINSDI...al.ini

windows10-2004-x64

1

$PLUGINSDI...er.bmp

windows7-x64

3

$PLUGINSDI...er.bmp

windows10-2004-x64

7

$PLUGINSDI...rd.bmp

windows7-x64

3

$PLUGINSDI...rd.bmp

windows10-2004-x64

7

characters/monika.png

windows7-x64

3

characters/monika.png

windows10-2004-x64

3

characters...ki.jpg

windows7-x64

3

characters...ki.jpg

windows10-2004-x64

3

characters/sayori.png

windows7-x64

3

characters/sayori.png

windows10-2004-x64

3

characters/yuri.chr

windows7-x64

3

characters/yuri.chr

windows10-2004-x64

3

game/bgm/c...ru.ogg

windows7-x64

1

game/bgm/c...ru.ogg

windows10-2004-x64

7

game/bgm/e...ru.ogg

windows7-x64

1

game/bgm/e...ru.ogg

windows10-2004-x64

7

game/fonts.rpa

windows7-x64

3

game/fonts.rpa

windows10-2004-x64

3

game/gui/end_ru.png

windows7-x64

3

game/gui/end_ru.png

windows10-2004-x64

3

game/gui/i...ru.png

windows7-x64

3

game/gui/i...ru.png

windows10-2004-x64

3

game/gui/i...ru.png

windows7-x64

3

game/gui/i...ru.png

windows10-2004-x64

3

game/gui/logo_ru.png

windows7-x64

3

game/gui/logo_ru.png

windows10-2004-x64

3

game/gui/n...ru.png

windows7-x64

3

game/gui/n...ru.png

windows10-2004-x64

3

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
14/10/2024, 11:49

Sharing

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

DDLC_russian_patch_3.2.exe

Resource

win7-20240903-en

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral2

Sample

DDLC_russian_patch_3.2.exe

Resource

win10v2004-20241007-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral3

Sample

$PLUGINSDIR/ioSpecial.ini

Resource

win7-20240708-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

$PLUGINSDIR/ioSpecial.ini

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

$PLUGINSDIR/modern-header.bmp

Resource

win7-20240903-en

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral6

Sample

$PLUGINSDIR/modern-header.bmp

Resource

win10v2004-20241007-en

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral7

Sample

$PLUGINSDIR/modern-wizard.bmp

Resource

win7-20240903-en

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral8

Sample

$PLUGINSDIR/modern-wizard.bmp

Resource

win10v2004-20241007-en

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral9

Sample

characters/monika.png

Resource

win7-20240903-en

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral10

Sample

characters/monika.png

Resource

win10v2004-20241007-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

characters/natsuki.jpg

Resource

win7-20241010-en

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral12

Sample

characters/natsuki.jpg

Resource

win10v2004-20241007-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

characters/sayori.png

Resource

win7-20240903-en

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral14

Sample

characters/sayori.png

Resource

win10v2004-20241007-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral15

Sample

characters/yuri.chr

Resource

win7-20240903-en

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral16

Sample

characters/yuri.chr

Resource

win10v2004-20241007-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral17

Sample

game/bgm/credits_ru.ogg

Resource

win7-20240729-en

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral18

Sample

game/bgm/credits_ru.ogg

Resource

win10v2004-20241007-en

windows10-2004-x64

10 signatures

150 seconds

Behavioral task

behavioral19

Sample

game/bgm/end-voice_ru.ogg

Resource

win7-20240903-en

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral20

Sample

game/bgm/end-voice_ru.ogg

Resource

win10v2004-20241007-en

windows10-2004-x64

10 signatures

150 seconds

Behavioral task

behavioral21

Sample

game/fonts.rpa

Resource

win7-20240708-en

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral22

Sample

game/fonts.rpa

Resource

win10v2004-20241007-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral23

Sample

game/gui/end_ru.png

Resource

win7-20241010-en

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral24

Sample

game/gui/end_ru.png

Resource

win10v2004-20241007-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral25

Sample

game/gui/icon_mac_ru.png

Resource

win7-20240903-en

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral26

Sample

game/gui/icon_mac_ru.png

Resource

win10v2004-20241007-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral27

Sample

game/gui/icon_win_ru.png

Resource

win7-20240903-en

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral28

Sample

game/gui/icon_win_ru.png

Resource

win10v2004-20241007-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral29

Sample

game/gui/logo_ru.png

Resource

win7-20240903-en

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral30

Sample

game/gui/logo_ru.png

Resource

win10v2004-20241007-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral31

Sample

game/gui/namebox_big_ru.png

Resource

win7-20241010-en

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral32

Sample

game/gui/namebox_big_ru.png

Resource

win10v2004-20241007-en

windows10-2004-x64

1 signatures

150 seconds

Report Analysis Logs

General

Target

characters/natsuki.jpg
Size

21KB
MD5

67cb78a5697a268ba5a045def8cd3654
SHA1

6e017db8521141bb126cb0797e4fcbad111b310f
SHA256

eeca05e8f7bcc7a04953cfb923490849200f53574b3ec0d14b44fd1a5be47672
SHA512

99c8ac355a5fa59d63e11e12d0515cd566ef74f2987e99ee6aebbace00b473541c122b9741a49b3b8e230964ef25fc23b569aa7b878fb17ecc3f08331897dad2
SSDEEP

384:7Ay32katHiSapDAhzrRwlP/agtrzGC1J4ehaIXLVPBwM7y9J9:kyYCSapDAhM/dNzGA3ha2iMup

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Processes

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\characters\natsuki.jpg
1⤵
PID:3872

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2025

Terms | Privacy