Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
10Static
static
10NAudio.dll
windows10-2004-x64
1Newtonsoft.Json.dll
windows10-2004-x64
1Plugins/Ac...ws.dll
windows10-2004-x64
1Plugins/Chat.dll
windows10-2004-x64
1Plugins/Chromium.dll
windows10-2004-x64
1Plugins/Clipboard.dll
windows10-2004-x64
1Plugins/Cm...ss.dll
windows10-2004-x64
1Plugins/Fi...er.dll
windows10-2004-x64
1Plugins/Fi...er.dll
windows10-2004-x64
1Plugins/HBrowser.dll
windows10-2004-x64
1Plugins/HRDP.dll
windows10-2004-x64
1Plugins/HVNC.dll
windows10-2004-x64
1Plugins/HV...ry.dll
windows10-2004-x64
1Plugins/Hi...ps.dll
windows10-2004-x64
1Plugins/In...ns.dll
windows10-2004-x64
1Plugins/Keylogger.dll
windows10-2004-x64
1Plugins/Maps.dll
windows10-2004-x64
1Plugins/Me...ox.dll
windows10-2004-x64
1Plugins/Mi...ne.dll
windows10-2004-x64
1Plugins/Ng...er.dll
windows10-2004-x64
1Plugins/Options.dll
windows10-2004-x64
1Plugins/Pastime.dll
windows10-2004-x64
1Plugins/Pe...ce.dll
windows10-2004-x64
1Plugins/Pr...er.dll
windows10-2004-x64
1Plugins/Programs.dll
windows10-2004-x64
1Plugins/Ra...re.dll
windows10-2004-x64
1Plugins/Recovery.dll
windows10-2004-x64
1Plugins/Regedit.dll
windows10-2004-x64
1Plugins/Re...op.dll
windows10-2004-x64
1Plugins/Re...xy.dll
windows10-2004-x64
1Plugins/RunPE.dll
windows10-2004-x64
1Plugins/Se...er.dll
windows10-2004-x64
1Analysis
-
max time kernel
428s -
max time network
432s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-it -
resource tags
arch:x64arch:x86image:win10v2004-20241007-itlocale:it-itos:windows10-2004-x64systemwindows -
submitted
31/01/2025, 19:08 UTC
Behavioral task
behavioral1
Sample
NAudio.dll
Resource
win10v2004-20241007-it
Behavioral task
behavioral2
Sample
Newtonsoft.Json.dll
Resource
win10v2004-20250129-it
Behavioral task
behavioral3
Sample
Plugins/ActiveWindows.dll
Resource
win10v2004-20250129-it
Behavioral task
behavioral4
Sample
Plugins/Chat.dll
Resource
win10v2004-20250129-it
Behavioral task
behavioral5
Sample
Plugins/Chromium.dll
Resource
win10v2004-20241007-it
Behavioral task
behavioral6
Sample
Plugins/Clipboard.dll
Resource
win10v2004-20250129-it
Behavioral task
behavioral7
Sample
Plugins/Cmstp-Bypass.dll
Resource
win10v2004-20250129-it
Behavioral task
behavioral8
Sample
Plugins/FileManager.dll
Resource
win10v2004-20250129-it
Behavioral task
behavioral9
Sample
Plugins/FilesSearcher.dll
Resource
win10v2004-20250129-it
Behavioral task
behavioral10
Sample
Plugins/HBrowser.dll
Resource
win10v2004-20241007-it
Behavioral task
behavioral11
Sample
Plugins/HRDP.dll
Resource
win10v2004-20241007-it
Behavioral task
behavioral12
Sample
Plugins/HVNC.dll
Resource
win10v2004-20250129-it
Behavioral task
behavioral13
Sample
Plugins/HVNCMemory.dll
Resource
win10v2004-20250129-it
Behavioral task
behavioral14
Sample
Plugins/HiddenApps.dll
Resource
win10v2004-20250129-it
Behavioral task
behavioral15
Sample
Plugins/Informations.dll
Resource
win10v2004-20250129-it
Behavioral task
behavioral16
Sample
Plugins/Keylogger.dll
Resource
win10v2004-20250129-it
Behavioral task
behavioral17
Sample
Plugins/Maps.dll
Resource
win10v2004-20250129-it
Behavioral task
behavioral18
Sample
Plugins/MessageBox.dll
Resource
win10v2004-20250129-it
Behavioral task
behavioral19
Sample
Plugins/Microphone.dll
Resource
win10v2004-20250129-it
Behavioral task
behavioral20
Sample
Plugins/Ngrok-Installer.dll
Resource
win10v2004-20241007-it
Behavioral task
behavioral21
Sample
Plugins/Options.dll
Resource
win10v2004-20250129-it
Behavioral task
behavioral22
Sample
Plugins/Pastime.dll
Resource
win10v2004-20250129-it
Behavioral task
behavioral23
Sample
Plugins/Performance.dll
Resource
win10v2004-20250129-it
Behavioral task
behavioral24
Sample
Plugins/ProcessManager.dll
Resource
win10v2004-20250129-it
Behavioral task
behavioral25
Sample
Plugins/Programs.dll
Resource
win10v2004-20250129-it
Behavioral task
behavioral26
Sample
Plugins/Ransomware.dll
Resource
win10v2004-20250129-it
Behavioral task
behavioral27
Sample
Plugins/Recovery.dll
Resource
win10v2004-20241007-it
Behavioral task
behavioral28
Sample
Plugins/Regedit.dll
Resource
win10v2004-20250129-it
Behavioral task
behavioral29
Sample
Plugins/RemoteDesktop.dll
Resource
win10v2004-20250129-it
Behavioral task
behavioral30
Sample
Plugins/ReverseProxy.dll
Resource
win10v2004-20250129-it
Behavioral task
behavioral31
Sample
Plugins/RunPE.dll
Resource
win10v2004-20250129-it
Behavioral task
behavioral32
Sample
Plugins/ServiceManager.dll
Resource
win10v2004-20250129-it
General
-
Target
Plugins/Chromium.dll
-
Size
32KB
-
MD5
edb2f0d0eb08dcd78b3ddf87a847de01
-
SHA1
cc23d101f917cad3664f8c1fa0788a89e03a669c
-
SHA256
b6d8bccdf123ceac6b9642ad3500d4e0b3d30b9c9dd2d29499d38c02bd8f9982
-
SHA512
8f87da834649a21a908c95a9ea8e2d94726bd9f33d4b7786348f6371dfae983cc2b5b5d4f80a17a60ded17d4eb71771ec25a7c82e4f3a90273c46c8ee3b8f2c3
-
SSDEEP
768:6SyQlmUmBlEu0FXfjq2sgDrLjfcVJ5sN9aWdMIxbKhJ+GEq3ZsL5f62:3yQltmBlmFXfjq2sgDrLjfcVJ5sNkQOa
Malware Config
Signatures
Processes
Network
-
Remote address:8.8.8.8:53Request241.150.49.20.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request2.159.190.20.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request167.173.78.104.in-addr.arpaIN PTRResponse167.173.78.104.in-addr.arpaIN PTRa104-78-173-167deploystaticakamaitechnologiescom
-
Remote address:8.8.8.8:53Request104.219.191.52.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request53.210.109.20.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request206.23.85.13.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request70.252.19.2.in-addr.arpaIN PTRResponse70.252.19.2.in-addr.arpaIN PTRa2-19-252-70deploystaticakamaitechnologiescom
-
Remote address:8.8.8.8:53Request11.153.16.2.in-addr.arpaIN PTRResponse11.153.16.2.in-addr.arpaIN PTRa2-16-153-11deploystaticakamaitechnologiescom
-
Remote address:8.8.8.8:53Request182.129.81.91.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request18.173.189.20.in-addr.arpaIN PTRResponse
-
72 B 158 B 1 1
DNS Request
241.150.49.20.in-addr.arpa
-
71 B 157 B 1 1
DNS Request
2.159.190.20.in-addr.arpa
-
73 B 139 B 1 1
DNS Request
167.173.78.104.in-addr.arpa
-
73 B 147 B 1 1
DNS Request
104.219.191.52.in-addr.arpa
-
72 B 158 B 1 1
DNS Request
53.210.109.20.in-addr.arpa
-
71 B 145 B 1 1
DNS Request
206.23.85.13.in-addr.arpa
-
70 B 133 B 1 1
DNS Request
70.252.19.2.in-addr.arpa
-
70 B 133 B 1 1
DNS Request
11.153.16.2.in-addr.arpa
-
72 B 147 B 1 1
DNS Request
182.129.81.91.in-addr.arpa
-
72 B 158 B 1 1
DNS Request
18.173.189.20.in-addr.arpa