Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    140s
  • max time network
    147s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230831-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230831-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01/09/2023, 20:54

General

  • Target

    Raftblock v.1.0.1/advancements/a1f9c46e-193c-4640-81e0-9d2b91a9f552.json

  • Size

    392B

  • MD5

    5de8030b9365ad791fc81f62380c22f7

  • SHA1

    fddc0b7363b9231e013ea132e6019584dff46550

  • SHA256

    b1b1a1ff8bfa93e87b6080f2329ee0cdb256d1f6c4c551189bd4c30f05c616ec

  • SHA512

    f1f2b2b5f64297036c71fc3bebf67491a664a3d7b70df7aa9b0c7078d656d332050efcf35b43787fdb425a6f24fd147499afee2a2069f26e74ee61f50c8d187a

Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Modifies registry class 2 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Windows\system32\cmd.exe
    cmd /c "C:\Users\Admin\AppData\Local\Temp\Raftblock v.1.0.1\advancements\a1f9c46e-193c-4640-81e0-9d2b91a9f552.json"
    1⤵
    • Modifies registry class
    PID:3844
  • C:\Windows\system32\OpenWith.exe
    C:\Windows\system32\OpenWith.exe -Embedding
    1⤵
    • Modifies registry class
    • Suspicious use of SetWindowsHookEx
    PID:1108

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads