Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
81s -
max time network
84s -
platform
windows10-1703_x64 -
resource
win10-20220812-en -
resource tags
-
submitted
15/02/2023, 16:37
General
-
Target
it/dado997/BossMania/Commands/SubCommands/BossList.class
-
Size
2KB
-
MD5
7f62b4e3527c43b2b8dad5ec166ce7f1
-
SHA1
7bab4f844339a9a855840323a2cbc434abea7446
-
SHA256
c5ceb53600bc0a316226491eec0069f7c50852dcefbfec9549b63387217cf73b
-
SHA512
33d97ae547fcc9575eb304ac917921bff362564d88f0db0ab1a833c5f74052e4766822a014a746069f36b6cad734036a20b025c4b892acc1902f71ad09523b2d
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\it\dado997\BossMania\Commands\SubCommands\BossList.class1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx