117d6569a86398643a68e7239f871b91566910ac2621740cb4974fe6a91d9815

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

Static

static

TuningPack...rm.url

windows7-x64

TuningPack...rm.url

windows10-2004-x64

TuningPack...st.url

windows7-x64

TuningPack...st.url

windows10-2004-x64

TuningPack...st.url

windows7-x64

TuningPack...st.url

windows10-2004-x64

TuningPack...ad.url

windows7-x64

TuningPack...ad.url

windows10-2004-x64

TuningPack...ms.bat

windows7-x64

TuningPack...ms.bat

windows10-2004-x64

TuningPack...ip.cmd

windows7-x64

TuningPack...ip.cmd

windows10-2004-x64

TuningPack...cp.bat

windows7-x64

TuningPack...cp.bat

windows10-2004-x64

TuningPack...ns.lnk

windows7-x64

TuningPack...ns.lnk

windows10-2004-x64

TuningPack...ad.url

windows7-x64

TuningPack...ad.url

windows10-2004-x64

TuningPack...ad.url

windows7-x64

TuningPack...ad.url

windows10-2004-x64

TuningPack...ad.url

windows7-x64

TuningPack...ad.url

windows10-2004-x64

TuningPack...ad.url

windows7-x64

TuningPack...ad.url

windows10-2004-x64

TuningPack...er.lnk

windows7-x64

TuningPack...er.lnk

windows10-2004-x64

TuningPack...ad.url

windows7-x64

TuningPack...ad.url

windows10-2004-x64

TuningPack...ad.url

windows7-x64

TuningPack...ad.url

windows10-2004-x64

TuningPack...er.exe

windows7-x64

TuningPack...er.exe

windows10-2004-x64

Analysis

max time kernel
119s
max time network
125s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
21/02/2024, 21:31

Sharing

Copy URL

Twitter E-mail

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

TuningPack-noguide-v65/Network/Benchmark/Bufferbloat Test by Waveform.url

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

TuningPack-noguide-v65/Network/Benchmark/Bufferbloat Test by Waveform.url

Resource

win10v2004-20240221-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

TuningPack-noguide-v65/Network/Benchmark/Cloudflare Speed Test.url

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

TuningPack-noguide-v65/Network/Benchmark/Cloudflare Speed Test.url

Resource

win10v2004-20240221-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

TuningPack-noguide-v65/Network/Benchmark/Packet Loss Test.url

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

TuningPack-noguide-v65/Network/Benchmark/Packet Loss Test.url

Resource

win10v2004-20240221-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

TuningPack-noguide-v65/Network/Benchmark/PingPlotter - download.url

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

TuningPack-noguide-v65/Network/Benchmark/PingPlotter - download.url

Resource

win10v2004-20240221-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

TuningPack-noguide-v65/Network/Misc/SET-network-params.bat

Resource

win7-20240221-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

TuningPack-noguide-v65/Network/Misc/SET-network-params.bat

Resource

win10v2004-20240221-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

TuningPack-noguide-v65/Network/Misc/renew-ip.cmd

Resource

win7-20240221-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral12

Sample

TuningPack-noguide-v65/Network/Misc/renew-ip.cmd

Resource

win10v2004-20240221-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral13

Sample

TuningPack-noguide-v65/Network/Misc/reset-tcp.bat

Resource

win7-20240221-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral14

Sample

TuningPack-noguide-v65/Network/Misc/reset-tcp.bat

Resource

win10v2004-20240221-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral15

Sample

TuningPack-noguide-v65/Network/Network Connections.lnk

Resource

win7-20240221-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

TuningPack-noguide-v65/Network/Network Connections.lnk

Resource

win10v2004-20240221-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral17

Sample

TuningPack-noguide-v65/Network/TCP Optimizer - download.url

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

TuningPack-noguide-v65/Network/TCP Optimizer - download.url

Resource

win10v2004-20240221-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

TuningPack-noguide-v65/Windows/Autoruns - download.url

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

TuningPack-noguide-v65/Windows/Autoruns - download.url

Resource

win10v2004-20240221-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

TuningPack-noguide-v65/Windows/Cleanmgr+ - download.url

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

TuningPack-noguide-v65/Windows/Cleanmgr+ - download.url

Resource

win10v2004-20240221-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

TuningPack-noguide-v65/Windows/Device Cleanup Tool - download.url

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

TuningPack-noguide-v65/Windows/Device Cleanup Tool - download.url

Resource

win10v2004-20240221-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

TuningPack-noguide-v65/Windows/Device Manager.lnk

Resource

win7-20240221-en

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral26

Sample

TuningPack-noguide-v65/Windows/Device Manager.lnk

Resource

win10v2004-20240221-en

windows10-2004-x64

10 signatures

150 seconds

Behavioral task

behavioral27

Sample

TuningPack-noguide-v65/Windows/DirectX - download.url

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

TuningPack-noguide-v65/Windows/DirectX - download.url

Resource

win10v2004-20240221-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

TuningPack-noguide-v65/Windows/Driver Booster - download.url

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

TuningPack-noguide-v65/Windows/Driver Booster - download.url

Resource

win10v2004-20240221-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

TuningPack-noguide-v65/Windows/PowerSettingsExplorer/PowerSettingsExplorer.exe

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

TuningPack-noguide-v65/Windows/PowerSettingsExplorer/PowerSettingsExplorer.exe

Resource

win10v2004-20240221-en

windows10-2004-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

TuningPack-noguide-v65/Network/Misc/SET-network-params.bat
Size

1KB
MD5

e98325e643c3611c76a834d24a8ff3c3
SHA1

d5100dbd098ffb816b9cdf4e54d7b0c251e5936d
SHA256

6c99e8f21676e74b78899a86d52280e5834833bfc5cc71d3fd0483caa6275638
SHA512

d3b7d93de3268f644f30b79a0195c61ea8a7bb6ba7b494277f4b200bd41d27b18179c0986c12380051d9fde33e86a99623ca381ab7e9971825a08ef20da186bb

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 9 IoCs

description	pid	Process	procid_target
PID 2820 wrote to memory of 2216	2820	cmd.exe	29
PID 2820 wrote to memory of 2216	2820	cmd.exe	29
PID 2820 wrote to memory of 2216	2820	cmd.exe	29
PID 2820 wrote to memory of 2816	2820	cmd.exe	30
PID 2820 wrote to memory of 2816	2820	cmd.exe	30
PID 2820 wrote to memory of 2816	2820	cmd.exe	30
PID 2820 wrote to memory of 460	2820	cmd.exe	33
PID 2820 wrote to memory of 460	2820	cmd.exe	33
PID 2820 wrote to memory of 460	2820	cmd.exe	33

Processes

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\TuningPack-noguide-v65\Network\Misc\SET-network-params.bat"
1⤵
- Suspicious use of WriteProcessMemory
PID:2820
- C:\Windows\system32\netsh.exe
  netsh interface tcp show global
  2⤵
  PID:2216
- C:\Windows\system32\netsh.exe
  netsh winsock show autotuning
  2⤵
  PID:2816
- C:\Windows\system32\netsh.exe
  netsh int tcp set global autotuning=normal
  2⤵
  PID:460

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads