Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
10Static
static
10empyrean-main.zip
windows7-x64
1empyrean-main.zip
windows10-2004-x64
1empyrean-m...config
windows7-x64
3empyrean-m...config
windows10-2004-x64
3empyrean-m...ort.md
windows7-x64
3empyrean-m...ort.md
windows10-2004-x64
3empyrean-m...est.md
windows7-x64
3empyrean-m...est.md
windows10-2004-x64
3empyrean-m...ignore
windows7-x64
3empyrean-m...ignore
windows10-2004-x64
3empyrean-m...s.json
windows7-x64
3empyrean-m...s.json
windows10-2004-x64
3empyrean-m...ING.md
windows7-x64
3empyrean-m...ING.md
windows10-2004-x64
3empyrean-m...NSE.md
windows7-x64
3empyrean-m...NSE.md
windows10-2004-x64
3empyrean-m...DME.md
windows7-x64
3empyrean-m...DME.md
windows10-2004-x64
3empyrean-m...ld.bat
windows7-x64
1empyrean-m...ld.bat
windows10-2004-x64
1empyrean-m...ain.py
windows7-x64
3empyrean-m...ain.py
windows10-2004-x64
3empyrean-m...ild.py
windows7-x64
3empyrean-m...ild.py
windows10-2004-x64
3empyrean-m...fig.py
windows7-x64
3empyrean-m...fig.py
windows10-2004-x64
3empyrean-m...env.py
windows7-x64
3empyrean-m...env.py
windows10-2004-x64
3empyrean-m...ate.py
windows7-x64
3empyrean-m...ate.py
windows10-2004-x64
3empyrean-m...fig.py
windows7-x64
3empyrean-m...fig.py
windows10-2004-x64
3Analysis
-
max time kernel
142s -
max time network
198s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
11/02/2024, 22:01
Behavioral task
behavioral1
Sample
empyrean-main.zip
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
empyrean-main.zip
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
empyrean-main/.editorconfig
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
empyrean-main/.editorconfig
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
empyrean-main/.github/ISSUE_TEMPLATE/bug_report.md
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
empyrean-main/.github/ISSUE_TEMPLATE/bug_report.md
Resource
win10v2004-20231215-en
Behavioral task
behavioral7
Sample
empyrean-main/.github/ISSUE_TEMPLATE/feature_request.md
Resource
win7-20231215-en
Behavioral task
behavioral8
Sample
empyrean-main/.github/ISSUE_TEMPLATE/feature_request.md
Resource
win10v2004-20231215-en
Behavioral task
behavioral9
Sample
empyrean-main/.gitignore
Resource
win7-20231215-en
Behavioral task
behavioral10
Sample
empyrean-main/.gitignore
Resource
win10v2004-20231222-en
Behavioral task
behavioral11
Sample
empyrean-main/.vscode/settings.json
Resource
win7-20231215-en
Behavioral task
behavioral12
Sample
empyrean-main/.vscode/settings.json
Resource
win10v2004-20231215-en
Behavioral task
behavioral13
Sample
empyrean-main/CONTRIBUTING.md
Resource
win7-20231129-en
Behavioral task
behavioral14
Sample
empyrean-main/CONTRIBUTING.md
Resource
win10v2004-20231215-en
Behavioral task
behavioral15
Sample
empyrean-main/LICENSE.md
Resource
win7-20231215-en
Behavioral task
behavioral16
Sample
empyrean-main/LICENSE.md
Resource
win10v2004-20231215-en
Behavioral task
behavioral17
Sample
empyrean-main/README.md
Resource
win7-20231129-en
Behavioral task
behavioral18
Sample
empyrean-main/README.md
Resource
win10v2004-20231215-en
Behavioral task
behavioral19
Sample
empyrean-main/build.bat
Resource
win7-20231215-en
Behavioral task
behavioral20
Sample
empyrean-main/build.bat
Resource
win10v2004-20231215-en
Behavioral task
behavioral21
Sample
empyrean-main/builder/main.py
Resource
win7-20231129-en
Behavioral task
behavioral22
Sample
empyrean-main/builder/main.py
Resource
win10v2004-20231215-en
Behavioral task
behavioral23
Sample
empyrean-main/builder/util/build.py
Resource
win7-20231215-en
Behavioral task
behavioral24
Sample
empyrean-main/builder/util/build.py
Resource
win10v2004-20231215-en
Behavioral task
behavioral25
Sample
empyrean-main/builder/util/config.py
Resource
win7-20231215-en
Behavioral task
behavioral26
Sample
empyrean-main/builder/util/config.py
Resource
win10v2004-20231215-en
Behavioral task
behavioral27
Sample
empyrean-main/builder/util/makeenv.py
Resource
win7-20231215-en
Behavioral task
behavioral28
Sample
empyrean-main/builder/util/makeenv.py
Resource
win10v2004-20231215-en
Behavioral task
behavioral29
Sample
empyrean-main/builder/util/obfuscate.py
Resource
win7-20231215-en
Behavioral task
behavioral30
Sample
empyrean-main/builder/util/obfuscate.py
Resource
win10v2004-20231215-en
Behavioral task
behavioral31
Sample
empyrean-main/builder/util/writeconfig.py
Resource
win7-20231215-en
Behavioral task
behavioral32
Sample
empyrean-main/builder/util/writeconfig.py
Resource
win10v2004-20231215-en
General
-
Target
empyrean-main/.github/ISSUE_TEMPLATE/bug_report.md
-
Size
548B
-
MD5
321354397b40eaca25d42e5fc272b833
-
SHA1
7257392870471914fee8c0d9ffb79ea644de854a
-
SHA256
4bce8f89c6269d623ee242f9f2333bb03ac378e133382f970b31ea978683ea68
-
SHA512
6a60331a0527658f0c5a1fafea17b48376af66eb14ab0791c6462ca8343357c5441dcb3762124a26255cc2eda8176fef1a3815807921f173981ef3880b3ab9c9
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-1815711207-1844170477-3539718864-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-1815711207-1844170477-3539718864-1000_Classes\Local Settings OpenWith.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1956 OpenWith.exe
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\empyrean-main\.github\ISSUE_TEMPLATE\bug_report.md1⤵
- Modifies registry class
PID:3204
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:1956