Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
188s -
max time network
194s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
05/05/2023, 18:23
General
-
Target
ChessBot.exe
-
Size
7.6MB
-
MD5
55c749940e6700a352676aaf61446355
-
SHA1
c14b72ac8742109d2478daf68b3bab0ac717e104
-
SHA256
f1ee0ab6152e2b66bddcef156971f035e247ce7e8c15f1f20ca24afb010e31ad
-
SHA512
cf6d3757697f3fbed122425dc1110ce004906176785605e2d466e27b03ffcddcdd771f4a59c4607e7045cd56de3e0739c5bc89dcc6a707f016d14cfce87e85d9
-
SSDEEP
196608:qjXReqpik0ZY5qnR4qmpM55mfFB5e29LbOshwnx:wP065qR4+5mfF6dshwn
Score
5/10
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ChessBot.exe"C:\Users\Admin\AppData\Local\Temp\ChessBot.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
17.4MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB