Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
149s -
max time network
153s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
21/03/2024, 03:07
Static task
static1
Behavioral task
behavioral1
Sample
da88541f9257f2b9c8c22e747a955e4d.js
Resource
win7-20240221-en
4 signatures
150 seconds
General
-
Target
da88541f9257f2b9c8c22e747a955e4d.js
-
Size
77KB
-
MD5
da88541f9257f2b9c8c22e747a955e4d
-
SHA1
69b78917d2c0df18906663427a82ac9f340d2d6a
-
SHA256
450ccfb4d45ec165f4272371dc90349c441eff693acd4a1a9330a7f86ecb248f
-
SHA512
5db1983e0f6eaf339ac591252f9fceced8fc36be377e4bc04cd03fa57d42d7116ac3a008307631098932eef3b0ef06636f847d6db467725f46570d48eccc16f1
-
SSDEEP
384:L37hD34tUWXaT1Qs3gmW5AtvamWATHJrmn7zBmWpIXbqXR:5Q
Malware Config
Signatures
-
Blocklisted process makes network request 17 IoCs
flow pid Process 4 2220 wscript.exe 5 2220 wscript.exe 6 2220 wscript.exe 7 2220 wscript.exe 8 2220 wscript.exe 9 2220 wscript.exe 11 2220 wscript.exe 12 2220 wscript.exe 13 2220 wscript.exe 14 2220 wscript.exe 15 2220 wscript.exe 16 2220 wscript.exe 18 2220 wscript.exe 19 2220 wscript.exe 20 2220 wscript.exe 21 2220 wscript.exe 22 2220 wscript.exe -
Drops startup file 2 IoCs
description ioc Process File created C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\da88541f9257f2b9c8c22e747a955e4d.js wscript.exe File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\da88541f9257f2b9c8c22e747a955e4d.js wscript.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).