Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
10Static
static
6IDA Pro 9....da.dll
windows7-x64
1IDA Pro 9....da.dll
windows10-2004-x64
1IDA Pro 9....32.dll
windows7-x64
1IDA Pro 9....32.dll
windows10-2004-x64
1IDA Pro 9....hv.exe
windows7-x64
1IDA Pro 9....hv.exe
windows10-2004-x64
1IDA Pro 9....ui.exe
windows7-x64
1IDA Pro 9....ui.exe
windows10-2004-x64
1IDA Pro 9....nks.sh
ubuntu-18.04-amd64
1IDA Pro 9....nks.sh
debian-9-armhf
1IDA Pro 9....nks.sh
debian-9-mips
1IDA Pro 9....nks.sh
debian-9-mipsel
1IDA Pro 9....de.pdf
windows7-x64
3IDA Pro 9....de.pdf
windows10-2004-x64
3IDA Pro 9....ent.so
ubuntu-22.04-amd64
1IDA Pro 9....server
ubuntu-24.04-amd64
IDA Pro 9....r_orig
ubuntu-24.04-amd64
IDA Pro 9....in.exe
windows7-x64
10IDA Pro 9....in.exe
windows10-2004-x64
10misc/hexli...ux.run
ubuntu-22.04-amd64
4misc/hexva...ux.run
ubuntu-24.04-amd64
8idasdk90/m...mu.vbs
windows7-x64
1idasdk90/m...mu.vbs
windows10-2004-x64
1idasdk90/m...mu.vbs
windows7-x64
1idasdk90/m...mu.vbs
windows10-2004-x64
1idasdk90/m...850.js
windows7-x64
3idasdk90/m...850.js
windows10-2004-x64
3idasdk90/m...na.vbs
windows7-x64
1idasdk90/m...na.vbs
windows10-2004-x64
1idasdk90/m...mu.vbs
windows7-x64
1idasdk90/m...mu.vbs
windows10-2004-x64
1idasdk90/m...ebc.py
windows7-x64
3Resubmissions
21/01/2025, 14:18
250121-rmh7dsxnew 617/01/2025, 12:26
250117-pmb2zaxreq 617/01/2025, 10:57
250117-m2me5svncl 614/01/2025, 16:30
250114-tzz2savmfn 10Analysis
-
max time kernel
121s -
max time network
138s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
14/01/2025, 16:30
Behavioral task
behavioral1
Sample
IDA Pro 9.0.240925/Crack/cracked+lic/ida.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
IDA Pro 9.0.240925/Crack/cracked+lic/ida.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
IDA Pro 9.0.240925/Crack/cracked+lic/ida32.dll
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
IDA Pro 9.0.240925/Crack/cracked+lic/ida32.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
IDA Pro 9.0.240925/Crack/hexvault_client_90_cracked/hv.exe
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
IDA Pro 9.0.240925/Crack/hexvault_client_90_cracked/hv.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
IDA Pro 9.0.240925/Crack/hexvault_client_90_cracked/hvui.exe
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
IDA Pro 9.0.240925/Crack/hexvault_client_90_cracked/hvui.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
IDA Pro 9.0.240925/Crack/hexvault_server_90_cracked/create_links.sh
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral10
Sample
IDA Pro 9.0.240925/Crack/hexvault_server_90_cracked/create_links.sh
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral11
Sample
IDA Pro 9.0.240925/Crack/hexvault_server_90_cracked/create_links.sh
Resource
debian9-mipsbe-20240729-en
Behavioral task
behavioral12
Sample
IDA Pro 9.0.240925/Crack/hexvault_server_90_cracked/create_links.sh
Resource
debian9-mipsel-20240611-en
Behavioral task
behavioral13
Sample
IDA Pro 9.0.240925/Crack/hexvault_server_90_cracked/ida_teams_admin_guide.pdf
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
IDA Pro 9.0.240925/Crack/hexvault_server_90_cracked/ida_teams_admin_guide.pdf
Resource
win10v2004-20241007-en
Behavioral task
behavioral15
Sample
IDA Pro 9.0.240925/Crack/hexvault_server_90_cracked/libmysqlclient.so
Resource
ubuntu2204-amd64-20240522.1-en
Behavioral task
behavioral16
Sample
IDA Pro 9.0.240925/Crack/hexvault_server_90_cracked/vault_server
Resource
ubuntu2404-amd64-20240523-en
Behavioral task
behavioral17
Sample
IDA Pro 9.0.240925/Crack/hexvault_server_90_cracked/vault_server_orig
Resource
ubuntu2404-amd64-20240523-en
Behavioral task
behavioral18
Sample
IDA Pro 9.0.240925/Setup/ida-pro_90_x64win.exe
Resource
win7-20240903-en
Behavioral task
behavioral19
Sample
IDA Pro 9.0.240925/Setup/ida-pro_90_x64win.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral20
Sample
misc/hexlicsrv90_x64linux.run
Resource
ubuntu2204-amd64-20240729-en
Behavioral task
behavioral21
Sample
misc/hexvault90_x64linux.run
Resource
ubuntu2404-amd64-20240523-en
Behavioral task
behavioral22
Sample
idasdk90/module/m7900/emu.vbs
Resource
win7-20240903-en
Behavioral task
behavioral23
Sample
idasdk90/module/m7900/emu.vbs
Resource
win10v2004-20241007-en
Behavioral task
behavioral24
Sample
idasdk90/module/mn102/emu.vbs
Resource
win7-20240903-en
Behavioral task
behavioral25
Sample
idasdk90/module/mn102/emu.vbs
Resource
win10v2004-20241007-en
Behavioral task
behavioral26
Sample
idasdk90/module/nec850/necv850.js
Resource
win7-20240903-en
Behavioral task
behavioral27
Sample
idasdk90/module/nec850/necv850.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral28
Sample
idasdk90/module/sam8/ana.vbs
Resource
win7-20240903-en
Behavioral task
behavioral29
Sample
idasdk90/module/sam8/ana.vbs
Resource
win10v2004-20241007-en
Behavioral task
behavioral30
Sample
idasdk90/module/sam8/emu.vbs
Resource
win7-20240903-en
Behavioral task
behavioral31
Sample
idasdk90/module/sam8/emu.vbs
Resource
win10v2004-20241007-en
Behavioral task
behavioral32
Sample
idasdk90/module/script/ebc.py
Resource
win7-20240903-en
General
-
Target
IDA Pro 9.0.240925/Crack/cracked+lic/ida32.dll
-
Size
4.4MB
-
MD5
7c9ee7bc31f24df6834d875f2c41e889
-
SHA1
1600ff7f49f5f46198489a87b9802d648c3c3e4c
-
SHA256
8ab79c98e7207832f4ecd0e031dbcf2ffee07c3efd58c94fabdfc5789a9bbe28
-
SHA512
a9da9bf4a26b1802434e799504f4d002270458fe9816dd190acf594e1dfda24016f5de6870ed6efc93b1f6ba04edfac50b1e65079f704950e83a9028e5b82227
-
SSDEEP
98304:JIVJmgZGXLWHFXF3hVfJKV1KwOS5ywJH5HimN:iVJnZsLWHFBhVfJKV1KwOS5vJHAI
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 2828 wrote to memory of 2852 2828 rundll32.exe 30 PID 2828 wrote to memory of 2852 2828 rundll32.exe 30 PID 2828 wrote to memory of 2852 2828 rundll32.exe 30