Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
100s -
max time network
101s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
-
submitted
26/08/2023, 01:54
General
-
Target
Battly Launcher.exe
-
Size
155.7MB
-
MD5
dcf7fe713d612bac683f427881b9de4a
-
SHA1
6604e9b85bacdb2df2018a7c9f48934bdf77d208
-
SHA256
667448a01ac50afb5a28bdf61225d44dc818c3b3e6b0c52e803cc84fc378a95f
-
SHA512
5ca29e2ac5523aec971954da3c358adb7d63effa816a7abb33a312557941e3032ee515046f6c3bc151850c9f91349ff66ee6a7c2e22c81da7d2d1c8a659b3254
-
SSDEEP
1572864:TyORhgkU5GDVG0inyE3ZKlWa9l9jEMJGuviC+b7kyp6Kn4cRsOVW99B95NeRLjTE:h+BJujFTaaoKvkKVB22MlIft
Score
4/10
Malware Config
Signatures
-
Drops file in Windows directory 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Battly Launcher.exe"C:\Users\Admin\AppData\Local\Temp\Battly Launcher.exe"1⤵
-
C:\Windows\system32\mspaint.exe"C:\Windows\system32\mspaint.exe"1⤵
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService1⤵