Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
147s -
max time network
167s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
11/10/2022, 13:11
Static task
static1
Behavioral task
behavioral1
Sample
1fede8b937cec9ef79be01ba9f4ff37463482a4db184828f54828bab1d318d78.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1fede8b937cec9ef79be01ba9f4ff37463482a4db184828f54828bab1d318d78.exe
Resource
win10v2004-20220812-en
General
-
Target
1fede8b937cec9ef79be01ba9f4ff37463482a4db184828f54828bab1d318d78.exe
-
Size
344KB
-
MD5
24f2e18191ad697e776b40407ebeabb4
-
SHA1
246ced4a8635528205110cb84fb81b795fa42f87
-
SHA256
1fede8b937cec9ef79be01ba9f4ff37463482a4db184828f54828bab1d318d78
-
SHA512
9443bc99fc1dda9e72ad8a1a2dc0fdfd9487aa7a8ced1cf8b8236e3092d3649157b3da84e9c253258a8882e60196595c3573f9df2cd77a4d685e324f1a7f2b10
-
SSDEEP
6144:nW+bvhPxsOmqUMrJI7F/a3G4Y80JlFC8YCQRF3zCMC9V7SART:W+bIYI7Fa4FCpp28GT
Malware Config
Signatures
-
Maps connected drives based on registry 3 TTPs 2 IoCs
Disk information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\services\disk\enum 1fede8b937cec9ef79be01ba9f4ff37463482a4db184828f54828bab1d318d78.exe Key value enumerated \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\disk\Enum 1fede8b937cec9ef79be01ba9f4ff37463482a4db184828f54828bab1d318d78.exe -
Drops file in Windows directory 1 IoCs
description ioc Process File created C:\Windows\Tasks\GetInShape.job 1fede8b937cec9ef79be01ba9f4ff37463482a4db184828f54828bab1d318d78.exe