Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    54s
  • max time network
    181s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230220-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
  • submitted
    20/05/2023, 21:40

General

  • Target

    SESmartID/Controller/SmartIDViewController.h

  • Size

    2KB

  • MD5

    0ccc1ec2974b0ad6f1efe4f1cca846d8

  • SHA1

    9d2ebc2715d875f93aec43c62fbe557139525091

  • SHA256

    ef07929e04d532cafddaa2862ae7f534ee0af1ca2f07a8a8245fe4e0edbbdc1b

  • SHA512

    724a86a468f18b908958935811cc25dc9c73645894b3fd2e6632e436de8f52d8ba97564cfa780cc59b0ea07c5faf17f842fce9bb341e72c9dfaa303be19c12ed

Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Modifies registry class 2 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Windows\system32\cmd.exe
    cmd /c C:\Users\Admin\AppData\Local\Temp\SESmartID\Controller\SmartIDViewController.h
    1⤵
    • Modifies registry class
    PID:2072
  • C:\Windows\system32\OpenWith.exe
    C:\Windows\system32\OpenWith.exe -Embedding
    1⤵
    • Modifies registry class
    • Suspicious use of SetWindowsHookEx
    PID:4340

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads