Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

1

ImageLoggerSetup.bat

windows7-x64

7

ImageLoggerSetup.bat

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ImageLoggerSetup.bat

  • Size

    14.8MB

  • Sample

    231012-h4nnrsdd9s

  • MD5

    ed58dfa2692a12ce30420dea2ecf0a32

  • SHA1

    4f9462f8b957e8ef949462b1c24e644c9a8e3c5f

  • SHA256

    a840fb6ea2354c5bdd1b531aa548620ed7c962a4241e4a384b03939eca8345b8

  • SHA512

    53d2f7ff22a2867f76fe7f3b8f85989473981a60b24dbac96037f7a845045909975e689894da873730f1ccdb57cf60e3303fe9ce9e7c9df982910fb9466e606e

  • SSDEEP

    49152:bseEmeHoJMcGjxqapB4EE9lEB0+ffIWtdRABKQoXKtOAVynWULWFZTksmlXGGmqQ:r

Score
10/10

Malware Config

Targets

    • Target

      ImageLoggerSetup.bat

    • Size

      14.8MB

    • MD5

      ed58dfa2692a12ce30420dea2ecf0a32

    • SHA1

      4f9462f8b957e8ef949462b1c24e644c9a8e3c5f

    • SHA256

      a840fb6ea2354c5bdd1b531aa548620ed7c962a4241e4a384b03939eca8345b8

    • SHA512

      53d2f7ff22a2867f76fe7f3b8f85989473981a60b24dbac96037f7a845045909975e689894da873730f1ccdb57cf60e3303fe9ce9e7c9df982910fb9466e606e

    • SSDEEP

      49152:bseEmeHoJMcGjxqapB4EE9lEB0+ffIWtdRABKQoXKtOAVynWULWFZTksmlXGGmqQ:r

    Score
    10/10

    • Suspicious use of NtCreateUserProcessOtherParentProcess

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks