Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
7Static
static
3TuningPack...rm.url
windows7-x64
1TuningPack...rm.url
windows10-2004-x64
1TuningPack...st.url
windows7-x64
1TuningPack...st.url
windows10-2004-x64
1TuningPack...st.url
windows7-x64
1TuningPack...st.url
windows10-2004-x64
1TuningPack...ad.url
windows7-x64
1TuningPack...ad.url
windows10-2004-x64
1TuningPack...ms.bat
windows7-x64
1TuningPack...ms.bat
windows10-2004-x64
1TuningPack...ip.cmd
windows7-x64
1TuningPack...ip.cmd
windows10-2004-x64
1TuningPack...cp.bat
windows7-x64
1TuningPack...cp.bat
windows10-2004-x64
1TuningPack...ns.lnk
windows7-x64
3TuningPack...ns.lnk
windows10-2004-x64
3TuningPack...ad.url
windows7-x64
1TuningPack...ad.url
windows10-2004-x64
1TuningPack...ad.url
windows7-x64
1TuningPack...ad.url
windows10-2004-x64
1TuningPack...ad.url
windows7-x64
1TuningPack...ad.url
windows10-2004-x64
1TuningPack...ad.url
windows7-x64
1TuningPack...ad.url
windows10-2004-x64
1TuningPack...er.lnk
windows7-x64
5TuningPack...er.lnk
windows10-2004-x64
7TuningPack...ad.url
windows7-x64
1TuningPack...ad.url
windows10-2004-x64
1TuningPack...ad.url
windows7-x64
1TuningPack...ad.url
windows10-2004-x64
1TuningPack...er.exe
windows7-x64
1TuningPack...er.exe
windows10-2004-x64
1Analysis
-
max time kernel
146s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20240221-en -
resource tags
arch:x64arch:x86image:win10v2004-20240221-enlocale:en-usos:windows10-2004-x64system -
submitted
21/02/2024, 21:31
Static task
static1
Behavioral task
behavioral1
Sample
TuningPack-noguide-v65/Network/Benchmark/Bufferbloat Test by Waveform.url
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral2
Sample
TuningPack-noguide-v65/Network/Benchmark/Bufferbloat Test by Waveform.url
Resource
win10v2004-20240221-en
windows10-2004-x64
Behavioral task
behavioral3
Sample
TuningPack-noguide-v65/Network/Benchmark/Cloudflare Speed Test.url
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral4
Sample
TuningPack-noguide-v65/Network/Benchmark/Cloudflare Speed Test.url
Resource
win10v2004-20240221-en
windows10-2004-x64
Behavioral task
behavioral5
Sample
TuningPack-noguide-v65/Network/Benchmark/Packet Loss Test.url
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral6
Sample
TuningPack-noguide-v65/Network/Benchmark/Packet Loss Test.url
Resource
win10v2004-20240221-en
windows10-2004-x64
Behavioral task
behavioral7
Sample
TuningPack-noguide-v65/Network/Benchmark/PingPlotter - download.url
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral8
Sample
TuningPack-noguide-v65/Network/Benchmark/PingPlotter - download.url
Resource
win10v2004-20240221-en
windows10-2004-x64
Behavioral task
behavioral9
Sample
TuningPack-noguide-v65/Network/Misc/SET-network-params.bat
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral10
Sample
TuningPack-noguide-v65/Network/Misc/SET-network-params.bat
Resource
win10v2004-20240221-en
windows10-2004-x64
Behavioral task
behavioral11
Sample
TuningPack-noguide-v65/Network/Misc/renew-ip.cmd
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral12
Sample
TuningPack-noguide-v65/Network/Misc/renew-ip.cmd
Resource
win10v2004-20240221-en
windows10-2004-x64
Behavioral task
behavioral13
Sample
TuningPack-noguide-v65/Network/Misc/reset-tcp.bat
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral14
Sample
TuningPack-noguide-v65/Network/Misc/reset-tcp.bat
Resource
win10v2004-20240221-en
windows10-2004-x64
Behavioral task
behavioral15
Sample
TuningPack-noguide-v65/Network/Network Connections.lnk
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral16
Sample
TuningPack-noguide-v65/Network/Network Connections.lnk
Resource
win10v2004-20240221-en
windows10-2004-x64
Behavioral task
behavioral17
Sample
TuningPack-noguide-v65/Network/TCP Optimizer - download.url
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral18
Sample
TuningPack-noguide-v65/Network/TCP Optimizer - download.url
Resource
win10v2004-20240221-en
windows10-2004-x64
Behavioral task
behavioral19
Sample
TuningPack-noguide-v65/Windows/Autoruns - download.url
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral20
Sample
TuningPack-noguide-v65/Windows/Autoruns - download.url
Resource
win10v2004-20240221-en
windows10-2004-x64
Behavioral task
behavioral21
Sample
TuningPack-noguide-v65/Windows/Cleanmgr+ - download.url
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral22
Sample
TuningPack-noguide-v65/Windows/Cleanmgr+ - download.url
Resource
win10v2004-20240221-en
windows10-2004-x64
Behavioral task
behavioral23
Sample
TuningPack-noguide-v65/Windows/Device Cleanup Tool - download.url
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral24
Sample
TuningPack-noguide-v65/Windows/Device Cleanup Tool - download.url
Resource
win10v2004-20240221-en
windows10-2004-x64
Behavioral task
behavioral25
Sample
TuningPack-noguide-v65/Windows/Device Manager.lnk
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral26
Sample
TuningPack-noguide-v65/Windows/Device Manager.lnk
Resource
win10v2004-20240221-en
windows10-2004-x64
Behavioral task
behavioral27
Sample
TuningPack-noguide-v65/Windows/DirectX - download.url
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral28
Sample
TuningPack-noguide-v65/Windows/DirectX - download.url
Resource
win10v2004-20240221-en
windows10-2004-x64
Behavioral task
behavioral29
Sample
TuningPack-noguide-v65/Windows/Driver Booster - download.url
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral30
Sample
TuningPack-noguide-v65/Windows/Driver Booster - download.url
Resource
win10v2004-20240221-en
windows10-2004-x64
Behavioral task
behavioral31
Sample
TuningPack-noguide-v65/Windows/PowerSettingsExplorer/PowerSettingsExplorer.exe
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral32
Sample
TuningPack-noguide-v65/Windows/PowerSettingsExplorer/PowerSettingsExplorer.exe
Resource
win10v2004-20240221-en
windows10-2004-x64
General
-
Target
TuningPack-noguide-v65/Network/Misc/SET-network-params.bat
-
Size
1KB
-
MD5
e98325e643c3611c76a834d24a8ff3c3
-
SHA1
d5100dbd098ffb816b9cdf4e54d7b0c251e5936d
-
SHA256
6c99e8f21676e74b78899a86d52280e5834833bfc5cc71d3fd0483caa6275638
-
SHA512
d3b7d93de3268f644f30b79a0195c61ea8a7bb6ba7b494277f4b200bd41d27b18179c0986c12380051d9fde33e86a99623ca381ab7e9971825a08ef20da186bb
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 5112 wrote to memory of 4184 5112 cmd.exe 87 PID 5112 wrote to memory of 4184 5112 cmd.exe 87 PID 5112 wrote to memory of 4404 5112 cmd.exe 88 PID 5112 wrote to memory of 4404 5112 cmd.exe 88
Processes
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\TuningPack-noguide-v65\Network\Misc\SET-network-params.bat"1⤵
- Suspicious use of WriteProcessMemory
PID:5112 -
C:\Windows\system32\netsh.exenetsh interface tcp show global2⤵PID:4184
-
-
C:\Windows\system32\netsh.exenetsh winsock show autotuning2⤵PID:4404
-