Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
315s -
max time network
885s -
platform
windows10-1703_x64 -
resource
win10-20230703-en -
resource tags
arch:x64arch:x86image:win10-20230703-enlocale:en-usos:windows10-1703-x64system -
submitted
06/07/2023, 14:18
Static task
static1
Behavioral task
behavioral1
Sample
test.bat
Resource
win10-20230703-en
2 signatures
1200 seconds
General
-
Target
test.bat
-
Size
314B
-
MD5
f8b830dcea2f21bd27821e51477f1ff4
-
SHA1
2759abecd4f0acb1dc88be924f970f47addc0d5f
-
SHA256
925081c13265008b9a7f5ea0ecc0478af4f0d3b9436006894c24a3523c791134
-
SHA512
2ac4153ef1b67f5f3085bc06018b77f3c3268044d2ad6b04dce8235fb7365e04938b58aba3807d75b50e5bf52a5502473ba96eb23c8dda43b407865ec9f879ab
Score
1/10
Malware Config
Signatures
-
Download via BitsAdmin 1 TTPs 1 IoCs
pid Process 2880 bitsadmin.exe -
Suspicious use of WriteProcessMemory 2 IoCs
description pid Process procid_target PID 4896 wrote to memory of 2880 4896 cmd.exe 71 PID 4896 wrote to memory of 2880 4896 cmd.exe 71
Processes
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\test.bat"1⤵
- Suspicious use of WriteProcessMemory
PID:4896 -
C:\Windows\system32\bitsadmin.exebitsadmin /transfer "PobieranieTeamViewer" https://download.teamviewer.com/download/TeamViewerQS.exe "C:\Users\Admin\AppData\Local\Temp\TeamViewerQS.exe"2⤵
- Download via BitsAdmin
PID:2880
-