Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    96s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    13/01/2025, 13:50

General

  • Target

    idle_master_extended_v1.5/IdleMaster.exe.xml

  • Size

    4KB

  • MD5

    1ec131ac66f6ad8cd1575a6d71004755

  • SHA1

    5c29b6f19a5567a71f762555ae2c4bfbf2f44a74

  • SHA256

    f5a6b3a57e72fd19ad0eabc7119804b5b8e5f629b2cd0cb2455d1017fafd4241

  • SHA512

    4376c1edacaf810f24024c066019d635daa358b007204e4839612115bde3556343aec5bcf7a1ec8a664527a45503bc24c3c95a4b1fe2313769b501c462bad545

  • SSDEEP

    96:ur71t7KhmTUD9AvmvLAvjAvUAvzgQZtsvOAvPognbAveuBvrivOvOvfMAvZQnLQB:ur7376mBlrf

Score
1/10

Malware Config

Signatures

Processes

  • C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE
    "C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\idle_master_extended_v1.5\IdleMaster.exe.xml"
    1⤵
      PID:1544
    • C:\Windows\System32\rundll32.exe
      C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
      1⤵
        PID:3948

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/1544-0-0x00007FF9EE690000-0x00007FF9EE6A0000-memory.dmp

        Filesize

        64KB

      • memory/1544-1-0x00007FFA2E6AD000-0x00007FFA2E6AE000-memory.dmp

        Filesize

        4KB

      • memory/1544-2-0x00007FFA2E610000-0x00007FFA2E805000-memory.dmp

        Filesize

        2.0MB

      • memory/1544-3-0x00007FFA2E610000-0x00007FFA2E805000-memory.dmp

        Filesize

        2.0MB