Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    149s
  • max time network
    61s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    02/02/2024, 14:23 UTC

General

  • Target

    SCPH-70004_BIOS_V12_PAL_200.rom2

  • Size

    512KB

  • MD5

    82dc50fa18e636850f557c4ea66c7bfd

  • SHA1

    cc44355ded232a2ba5309bb24d4cd55af08696b2

  • SHA256

    b86fbccaa111ca7497630337dafea7da7320fc4f924ada22b92145ef806e7b42

  • SHA512

    ec1dc6cf74dfc34f01fbbcc2e0f11bb32d7a52101f8ebbd4ca10268165fe2639efa98e018f0a6ae58f74a491461ab301b9dbf9213687731cc2fb4dcb1e22317b

  • SSDEEP

    6144:DBFsXCSZ3B4YEXxyCpmDqoPYmMsHw1SiXWIXjxqJ4Li:1Sf3ounMsMjq4O

Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Modifies registry class 9 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 2 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs
  • Suspicious use of WriteProcessMemory 7 IoCs

Processes

  • C:\Windows\system32\cmd.exe
    cmd /c C:\Users\Admin\AppData\Local\Temp\SCPH-70004_BIOS_V12_PAL_200.rom2
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1264
    • C:\Windows\system32\rundll32.exe
      "C:\Windows\system32\rundll32.exe" C:\Windows\system32\shell32.dll,OpenAs_RunDLL C:\Users\Admin\AppData\Local\Temp\SCPH-70004_BIOS_V12_PAL_200.rom2
      2⤵
      • Modifies registry class
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of WriteProcessMemory
      PID:2748
      • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
        "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\SCPH-70004_BIOS_V12_PAL_200.rom2"
        3⤵
        • Suspicious behavior: GetForegroundWindowSpam
        • Suspicious use of SetWindowsHookEx
        PID:880

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    047aa214e4e28049ebaf5b47aceba0eb

    SHA1

    9f234ee7f9b4b11c80b8532e3faf8c8edce6b8d9

    SHA256

    f525180614a9059df91e4d54b4d7122c6d1e17ea6a791135011788c1c1a28a0f

    SHA512

    c9dc9df315132502a54d9e696867aa44c20848ccce3adbde8c104a5cf3a8dae92c9c9068431e74e162b6a658a75691123b1515bf0f98913e248cfb974d2ecfe4

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.