Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
10Static
static
4TeraBox_sl....4.exe
windows7-x64
10TeraBox_sl....4.exe
windows10-2004-x64
4api-ms-win...-0.dll
windows10-2004-x64
3api-ms-win...-0.dll
windows10-2004-x64
3api-ms-win...-0.dll
windows10-2004-x64
3api-ms-win...-0.dll
windows10-2004-x64
3api-ms-win...-0.dll
windows10-2004-x64
3api-ms-win...-0.dll
windows10-2004-x64
3api-ms-win...-0.dll
windows10-2004-x64
3api-ms-win...-0.dll
windows10-2004-x64
3api-ms-win...-0.dll
windows10-2004-x64
3api-ms-win...-0.dll
windows10-2004-x64
3api-ms-win...-0.dll
windows10-2004-x64
3api-ms-win...-0.dll
windows10-2004-x64
3cefbrowser.dll
windows7-x64
3cefbrowser.dll
windows10-2004-x64
3chrome_elf.dll
windows7-x64
3chrome_elf.dll
windows10-2004-x64
3concrt140.dll
windows7-x64
3concrt140.dll
windows10-2004-x64
3d3dcompiler_47.dll
windows10-2004-x64
3kernel.dll
windows7-x64
3kernel.dll
windows10-2004-x64
3kernelUpdate.exe
windows7-x64
3kernelUpdate.exe
windows10-2004-x64
3libEGL.dll
windows7-x64
3libEGL.dll
windows10-2004-x64
3libGLESv2.dll
windows7-x64
3libGLESv2.dll
windows10-2004-x64
3libcef.dll
windows7-x64
3libcef.dll
windows10-2004-x64
3minosagent.dll
windows7-x64
3Analysis
-
max time kernel
93s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
06/12/2024, 13:47
Behavioral task
behavioral1
Sample
TeraBox_sl_b_1.35.0.4.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
TeraBox_sl_b_1.35.0.4.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
api-ms-win-crt-filesystem-l1-1-0.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral4
Sample
api-ms-win-crt-heap-l1-1-0.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
api-ms-win-crt-locale-l1-1-0.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral6
Sample
api-ms-win-crt-math-l1-1-0.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
api-ms-win-crt-multibyte-l1-1-0.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral8
Sample
api-ms-win-crt-private-l1-1-0.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
api-ms-win-crt-process-l1-1-0.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral10
Sample
api-ms-win-crt-runtime-l1-1-0.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
api-ms-win-crt-stdio-l1-1-0.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral12
Sample
api-ms-win-crt-string-l1-1-0.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral13
Sample
api-ms-win-crt-time-l1-1-0.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral14
Sample
api-ms-win-crt-utility-l1-1-0.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral15
Sample
cefbrowser.dll
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
cefbrowser.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral17
Sample
chrome_elf.dll
Resource
win7-20240903-en
Behavioral task
behavioral18
Sample
chrome_elf.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral19
Sample
concrt140.dll
Resource
win7-20240903-en
Behavioral task
behavioral20
Sample
concrt140.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral21
Sample
d3dcompiler_47.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral22
Sample
kernel.dll
Resource
win7-20240729-en
Behavioral task
behavioral23
Sample
kernel.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral24
Sample
kernelUpdate.exe
Resource
win7-20240708-en
Behavioral task
behavioral25
Sample
kernelUpdate.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral26
Sample
libEGL.dll
Resource
win7-20240708-en
Behavioral task
behavioral27
Sample
libEGL.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral28
Sample
libGLESv2.dll
Resource
win7-20240708-en
Behavioral task
behavioral29
Sample
libGLESv2.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral30
Sample
libcef.dll
Resource
win7-20240903-en
Behavioral task
behavioral31
Sample
libcef.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral32
Sample
minosagent.dll
Resource
win7-20240903-en
General
-
Target
TeraBox_sl_b_1.35.0.4.exe
-
Size
85.7MB
-
MD5
6a91158eae5293fc435649efd565f0ad
-
SHA1
1988fdb9e28454f3fbc63e01f24475516924e735
-
SHA256
0ec7ca9a453c0fe7ac1b91dbae74a8b77e788c490b65365896d2d319128431d6
-
SHA512
8fe16d57cf354e09674d5160a363ee74748850628251d36b88069dfa41ce96e1b6d7510bf630f7106c0cd4293cbb88fd950e3add2520981b6cc0f0bffd0aedc4
-
SSDEEP
1572864:UytVxQY8XDSbjByvcK//fz2+f6feJF7+DGAndY8KXkX3w4Y1X8iwGrZd0Zr75Nuw:UytXQebjYcg/fiUTAngkXyB8ixvwu
Malware Config
Signatures
-
Loads dropped DLL 3 IoCs
pid Process 1372 TeraBox_sl_b_1.35.0.4.exe 1372 TeraBox_sl_b_1.35.0.4.exe 1372 TeraBox_sl_b_1.35.0.4.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language TeraBox_sl_b_1.35.0.4.exe -
Suspicious behavior: EnumeratesProcesses 28 IoCs
pid Process 1372 TeraBox_sl_b_1.35.0.4.exe 1372 TeraBox_sl_b_1.35.0.4.exe 1372 TeraBox_sl_b_1.35.0.4.exe 1372 TeraBox_sl_b_1.35.0.4.exe 1372 TeraBox_sl_b_1.35.0.4.exe 1372 TeraBox_sl_b_1.35.0.4.exe 1372 TeraBox_sl_b_1.35.0.4.exe 1372 TeraBox_sl_b_1.35.0.4.exe 1372 TeraBox_sl_b_1.35.0.4.exe 1372 TeraBox_sl_b_1.35.0.4.exe 1372 TeraBox_sl_b_1.35.0.4.exe 1372 TeraBox_sl_b_1.35.0.4.exe 1372 TeraBox_sl_b_1.35.0.4.exe 1372 TeraBox_sl_b_1.35.0.4.exe 1372 TeraBox_sl_b_1.35.0.4.exe 1372 TeraBox_sl_b_1.35.0.4.exe 1372 TeraBox_sl_b_1.35.0.4.exe 1372 TeraBox_sl_b_1.35.0.4.exe 1372 TeraBox_sl_b_1.35.0.4.exe 1372 TeraBox_sl_b_1.35.0.4.exe 1372 TeraBox_sl_b_1.35.0.4.exe 1372 TeraBox_sl_b_1.35.0.4.exe 1372 TeraBox_sl_b_1.35.0.4.exe 1372 TeraBox_sl_b_1.35.0.4.exe 1372 TeraBox_sl_b_1.35.0.4.exe 1372 TeraBox_sl_b_1.35.0.4.exe 1372 TeraBox_sl_b_1.35.0.4.exe 1372 TeraBox_sl_b_1.35.0.4.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.8MB
MD5e430cf975738925189d99853a1ac7861
SHA1a4ecd06fea113aed02b4801f4f4471fe15a6216e
SHA2562ee1c094a8428dda38976745e823d1106c0dba2b1f25ccefcb1dc759a0cd5491
SHA51283c8dd4f4c6c11a902012256faab6be30acc7b52810d68a254fb3b8884a98f9b8a3ab9b66b845e9d075a97a800875c9a99387a01d10abd89a05a9cc16cfe0312
-
Filesize
12KB
MD58cf2ac271d7679b1d68eefc1ae0c5618
SHA17cc1caaa747ee16dc894a600a4256f64fa65a9b8
SHA2566950991102462d84fdc0e3b0ae30c95af8c192f77ce3d78e8d54e6b22f7c09ba
SHA512ce828fb9ecd7655cc4c974f78f209d3326ba71ced60171a45a437fc3fff3bd0d69a0997adaca29265c7b5419bdea2b17f8cc8ceae1b8ce6b22b7ed9120bb5ad3
-
Filesize
4KB
MD5f0438a894f3a7e01a4aae8d1b5dd0289
SHA1b058e3fcfb7b550041da16bf10d8837024c38bf6
SHA25630c6c3dd3cc7fcea6e6081ce821adc7b2888542dae30bf00e881c0a105eb4d11
SHA512f91fcea19cbddf8086affcb63fe599dc2b36351fc81ac144f58a80a524043ddeaa3943f36c86ebae45dd82e8faf622ea7b7c9b776e74c54b93df2963cfe66cc7