Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

Assets/Aud...e2.ps1

windows7-x64

6

Assets/Aud...e2.ps1

windows10-2004-x64

6

Engine.dll

windows7-x64

1

Engine.dll

windows10-2004-x64

1

EntitySystem.dll

windows7-x64

1

EntitySystem.dll

windows10-2004-x64

1

LiteNetLib.dll

windows7-x64

1

LiteNetLib.dll

windows10-2004-x64

1

Newtonsoft.Json.dll

windows7-x64

1

Newtonsoft.Json.dll

windows10-2004-x64

1

OpenAL/x64...32.dll

windows7-x64

10

OpenAL/x64...32.dll

windows10-2004-x64

10

OpenAL/x86...32.dll

windows7-x64

3

OpenAL/x86...32.dll

windows10-2004-x64

3

OpenTK.dll

windows7-x64

1

OpenTK.dll

windows10-2004-x64

1

Survivalcraft.exe

windows7-x64

10

Survivalcraft.exe

windows10-2004-x64

10

install.sh

windows7-x64

3

install.sh

windows10-2004-x64

3

start.sh

windows7-x64

3

start.sh

windows10-2004-x64

3

Analysis

  • max time kernel
    121s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    29/01/2025, 17:53

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    OpenAL/x64/openal32.dll

  • Size

    407KB

  • MD5

    2b5a427b85eea53675484405af5010e0

  • SHA1

    19201c0fb48ed20effd74de7989c2fa45326e35e

  • SHA256

    f42706c862bc3d66550eb0a929bd5cb195c7a1f6a181cc854d59fc124d771023

  • SHA512

    f1793a8d9402da2d23e14046ca2618bdb5fc0dd8986880f07d54df8fd3b23359de9d9b515f53b072a1d843b492d000ac5f2716ceb01f3f9d694e1aa8c4cf10d3

  • SSDEEP

    6144:ipdaQesGCdaTNOznuivPI6YXaZGQTH0PBXWSD1y/X4uI+D:wTesGgaTNO6ivPjKaZG4X4uI+D

Score
10/10
warmcookiebackdoor

Malware Config

Extracted

Family

warmcookie

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\OpenAL\x64\openal32.dll,#1
    1⤵
      PID:2704

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2704-0-0x000000006B600000-0x000000006B65D000-memory.dmp

      Filesize

      372KB

      Download