Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

DcRat.zip

windows10-2004-x64

10

BackupCertificate.zip

windows10-2004-x64

1

ServerCertificate.p12

windows10-2004-x64

7

DcRat.exe

windows10-2004-x64

10

DcRat.exe.xml

windows10-2004-x64

1

Plugins/Audio.dll

windows10-2004-x64

1

Plugins/Chat.dll

windows10-2004-x64

1

Plugins/Extra.dll

windows10-2004-x64

1

Plugins/Fi...er.dll

windows10-2004-x64

1

Plugins/Fi...er.dll

windows10-2004-x64

1

Plugins/Fun.dll

windows10-2004-x64

1

Plugins/In...on.dll

windows10-2004-x64

1

Plugins/Keylogger.exe

windows10-2004-x64

1

Plugins/Logger.dll

windows10-2004-x64

1

Plugins/Mi...us.dll

windows10-2004-x64

1

Plugins/Netstat.dll

windows10-2004-x64

1

Plugins/Options.dll

windows10-2004-x64

1

Plugins/Pr...er.dll

windows10-2004-x64

1

Plugins/Ra...re.dll

windows10-2004-x64

1

Plugins/Recovery.dll

windows10-2004-x64

1

Plugins/Regedit.dll

windows10-2004-x64

1

Plugins/Re...ra.dll

windows10-2004-x64

1

Plugins/Re...op.dll

windows10-2004-x64

1

Plugins/SendFile.dll

windows10-2004-x64

1

Plugins/Se...ry.dll

windows10-2004-x64

1

ServerCertificate.p12

windows10-2004-x64

7

Stub/Client.exe

windows10-2004-x64

10

project2.dll

windows10-2004-x64

3

Analysis

  • max time kernel
    93s
  • max time network
    144s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02/12/2024, 20:13

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Plugins/SendMemory.dll

  • Size

    27KB

  • MD5

    b2f6f7137b96e5f97516f27e1c252943

  • SHA1

    09a9c48d6b9009e9a1639414da89334d96544507

  • SHA256

    123fb77ea70cd48298a95cb84464e9cfd57c125828592d63941a04ea5ff91e4e

  • SHA512

    80f6add4537d5f05362ba140d420f4a840f6a4dcc10f61302c5dfd86f9559b9827a6913a28334fe804fd0555af4aa99fba9fc1614fb1c9ec938780432b37fd39

  • SSDEEP

    384:go7mTJ92TmR0EMZadseXGUDfhD0uQ5MZm412CqDjbAFUYZE5xWfNxTa52p85:goiTJ9NOVa9pX1/mYZE5xWl5g2pO

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\Plugins\SendMemory.dll,#1
    1⤵
      PID:2288

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads