Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    153s
  • max time network
    169s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    13/10/2023, 05:12

General

  • Target

    HTFXLimited_JC.exe

  • Size

    3.3MB

  • MD5

    68c0d862632c85bd7be3a5ca585abef4

  • SHA1

    74485c930d5ba001c9d108ab6007fb4381ac8945

  • SHA256

    fc0710a9db03a6880a7678546f030ac96a96db020b9c29753b5cc1b245ea9bcb

  • SHA512

    5df67e5639f06fe54bf9484851b05f465ba8eedab8d914017551b5002e0fcb2dd0363f4e58ae02ead06c5b8b283a73a4a2df26f522a07c6625ce25b51f9eb988

  • SSDEEP

    49152:u3/0e6aTrHGw0g83XXoTgi8CuDHwb0X3nOjVsCXn:ze6hgOHQS+WCXn

Score
7/10

Malware Config

Signatures

  • Checks BIOS information in registry 2 TTPs 1 IoCs

    BIOS information is often read in order to detect sandboxing environments.

  • Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs

    Bootkits write to the MBR to gain persistence at a level below the operating system.

  • Drops file in Program Files directory 1 IoCs
  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies system certificate store 2 TTPs 5 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\HTFXLimited_JC.exe
    "C:\Users\Admin\AppData\Local\Temp\HTFXLimited_JC.exe"
    1⤵
    • Checks BIOS information in registry
    • Writes to the Master Boot Record (MBR)
    • Drops file in Program Files directory
    • Checks processor information in registry
    • Enumerates system info in registry
    • Modifies system certificate store
    PID:4816

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4816-1-0x0000000001600000-0x00000000016BE000-memory.dmp

    Filesize

    760KB

  • memory/4816-2-0x0000000001800000-0x0000000001AC9000-memory.dmp

    Filesize

    2.8MB

  • memory/4816-3-0x0000000001CA0000-0x0000000001D0B000-memory.dmp

    Filesize

    428KB

  • memory/4816-4-0x0000000001F00000-0x00000000020A1000-memory.dmp

    Filesize

    1.6MB

  • memory/4816-5-0x00000000016C0000-0x00000000016EB000-memory.dmp

    Filesize

    172KB

  • memory/4816-6-0x0000000001D10000-0x0000000001DBC000-memory.dmp

    Filesize

    688KB

  • memory/4816-7-0x00000000020B0000-0x00000000027EF000-memory.dmp

    Filesize

    7.2MB

  • memory/4816-8-0x00000000027F0000-0x000000000291A000-memory.dmp

    Filesize

    1.2MB

  • memory/4816-9-0x0000000002920000-0x00000000029ED000-memory.dmp

    Filesize

    820KB

  • memory/4816-10-0x00000000029F0000-0x0000000002A45000-memory.dmp

    Filesize

    340KB

  • memory/4816-11-0x0000000001DC0000-0x0000000001DE7000-memory.dmp

    Filesize

    156KB

  • memory/4816-12-0x0000000002A50000-0x0000000002BA6000-memory.dmp

    Filesize

    1.3MB

  • memory/4816-13-0x0000000002BB0000-0x0000000002E4A000-memory.dmp

    Filesize

    2.6MB

  • memory/4816-14-0x0000000002E50000-0x0000000002EB0000-memory.dmp

    Filesize

    384KB

  • memory/4816-15-0x00000000016F0000-0x00000000016FC000-memory.dmp

    Filesize

    48KB

  • memory/4816-16-0x0000000001DF0000-0x0000000001DFA000-memory.dmp

    Filesize

    40KB

  • memory/4816-17-0x0000000002EB0000-0x0000000003059000-memory.dmp

    Filesize

    1.7MB

  • memory/4816-18-0x0000000003060000-0x0000000003244000-memory.dmp

    Filesize

    1.9MB

  • memory/4816-19-0x0000000003250000-0x000000000337A000-memory.dmp

    Filesize

    1.2MB

  • memory/4816-20-0x0000000003380000-0x00000000033A2000-memory.dmp

    Filesize

    136KB

  • memory/4816-21-0x00000000033E0000-0x00000000034EB000-memory.dmp

    Filesize

    1.0MB

  • memory/4816-22-0x00000000034F0000-0x000000000358E000-memory.dmp

    Filesize

    632KB

  • memory/4816-23-0x0000000003590000-0x000000000362B000-memory.dmp

    Filesize

    620KB

  • memory/4816-24-0x0000000003630000-0x00000000036CD000-memory.dmp

    Filesize

    628KB

  • memory/4816-25-0x0000000003870000-0x0000000003970000-memory.dmp

    Filesize

    1024KB

  • memory/4816-26-0x0000000003970000-0x0000000003CC5000-memory.dmp

    Filesize

    3.3MB

  • memory/4816-27-0x00000000036D0000-0x0000000003701000-memory.dmp

    Filesize

    196KB

  • memory/4816-28-0x00000000033B0000-0x00000000033DC000-memory.dmp

    Filesize

    176KB

  • memory/4816-29-0x0000000003720000-0x0000000003750000-memory.dmp

    Filesize

    192KB

  • memory/4816-30-0x00000000037B0000-0x00000000037C2000-memory.dmp

    Filesize

    72KB

  • memory/4816-31-0x00000000055B0000-0x0000000005D40000-memory.dmp

    Filesize

    7.6MB

  • memory/4816-32-0x00000000037D0000-0x00000000037FC000-memory.dmp

    Filesize

    176KB

  • memory/4816-33-0x0000000005470000-0x000000000551D000-memory.dmp

    Filesize

    692KB

  • memory/4816-34-0x0000000003830000-0x0000000003842000-memory.dmp

    Filesize

    72KB

  • memory/4816-35-0x0000000006290000-0x0000000006313000-memory.dmp

    Filesize

    524KB

  • memory/4816-36-0x0000000006320000-0x00000000063C9000-memory.dmp

    Filesize

    676KB

  • memory/4816-37-0x0000000006880000-0x0000000006899000-memory.dmp

    Filesize

    100KB

  • memory/4816-38-0x00000000063D0000-0x000000000646E000-memory.dmp

    Filesize

    632KB

  • memory/4816-39-0x0000000006770000-0x00000000067DA000-memory.dmp

    Filesize

    424KB

  • memory/4816-40-0x00000000068A0000-0x000000000696C000-memory.dmp

    Filesize

    816KB

  • memory/4816-41-0x00000000067E0000-0x000000000681B000-memory.dmp

    Filesize

    236KB

  • memory/4816-43-0x0000000005520000-0x000000000552A000-memory.dmp

    Filesize

    40KB

  • memory/4816-42-0x0000000003850000-0x0000000003858000-memory.dmp

    Filesize

    32KB

  • memory/4816-44-0x0000000006970000-0x00000000069EF000-memory.dmp

    Filesize

    508KB

  • memory/4816-45-0x0000000006F70000-0x0000000007001000-memory.dmp

    Filesize

    580KB

  • memory/4816-46-0x0000000005570000-0x0000000005588000-memory.dmp

    Filesize

    96KB

  • memory/4816-47-0x0000000007010000-0x0000000007044000-memory.dmp

    Filesize

    208KB

  • memory/4816-48-0x0000000006A40000-0x0000000006A4C000-memory.dmp

    Filesize

    48KB

  • memory/4816-49-0x0000000007050000-0x000000000706D000-memory.dmp

    Filesize

    116KB

  • memory/4816-50-0x0000000006A50000-0x0000000006A5D000-memory.dmp

    Filesize

    52KB

  • memory/4816-51-0x0000000007070000-0x0000000007085000-memory.dmp

    Filesize

    84KB

  • memory/4816-52-0x000000000B830000-0x000000000B86B000-memory.dmp

    Filesize

    236KB

  • memory/4816-53-0x000000000B870000-0x000000000B897000-memory.dmp

    Filesize

    156KB

  • memory/4816-54-0x000000000B8A0000-0x000000000B8C6000-memory.dmp

    Filesize

    152KB

  • memory/4816-55-0x000000000B9A0000-0x000000000B9C3000-memory.dmp

    Filesize

    140KB

  • memory/4816-56-0x0000000006A70000-0x0000000006B85000-memory.dmp

    Filesize

    1.1MB

  • memory/4816-57-0x0000000006CF0000-0x0000000006D9C000-memory.dmp

    Filesize

    688KB

  • memory/4816-58-0x0000000009620000-0x0000000009719000-memory.dmp

    Filesize

    996KB

  • memory/4816-59-0x0000000009720000-0x0000000009812000-memory.dmp

    Filesize

    968KB

  • memory/4816-60-0x0000000009820000-0x0000000009B7E000-memory.dmp

    Filesize

    3.4MB

  • memory/4816-61-0x0000000006DA0000-0x0000000006DD3000-memory.dmp

    Filesize

    204KB

  • memory/4816-62-0x0000000009B80000-0x0000000009CD4000-memory.dmp

    Filesize

    1.3MB