Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

08/02/2024, 19:42

240208-ye7cksbg28 10

08/02/2024, 19:33

240208-x9kavshh6s 10

Analysis

  • max time kernel
    125s
  • max time network
    147s
  • platform
    windows10-1703_x64
  • resource
    win10-20231215-en
  • resource tags

    arch:x64arch:x86image:win10-20231215-enlocale:en-usos:windows10-1703-x64system
  • submitted
    08/02/2024, 19:33

General

  • Target

    Korepi/chrome_100_percent.pak

  • Size

    126KB

  • MD5

    d31f3439e2a3f7bee4ddd26f46a2b83f

  • SHA1

    c5a26f86eb119ae364c5bf707bebed7e871fc214

  • SHA256

    9f79f46ca911543ead096a5ee28a34bf1fbe56ec9ba956032a6a2892b254857e

  • SHA512

    aa27c97bf5581eb3f5e88f112df8bfb6a5283ce44eb13fbc41855008f84fb5b111dfe0616c310c3642b7f8ac99623d7c217aecc353f54f4d8f7042840099abc5

  • SSDEEP

    3072:5KzwqCT4waJL2myFhPNL2o418Gb0+VRLf0ld0GY3cQ39Vm2I:5Kzwt4LwmU3K18Gb0OV8ld0GecQ3f2

Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Modifies registry class 2 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Windows\system32\cmd.exe
    cmd /c C:\Users\Admin\AppData\Local\Temp\Korepi\chrome_100_percent.pak
    1⤵
    • Modifies registry class
    PID:4752
  • C:\Windows\system32\OpenWith.exe
    C:\Windows\system32\OpenWith.exe -Embedding
    1⤵
    • Modifies registry class
    • Suspicious use of SetWindowsHookEx
    PID:3308

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads