Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

25/03/2024, 21:05

240325-zxdnnahe48 3

25/03/2024, 20:59

240325-zswcxahd77 3

25/03/2024, 20:56

240325-zq3dfahd45 3

25/03/2024, 20:51

240325-zm6xfshc96 3

25/03/2024, 20:45

240325-zj6ghsca7s 3

25/03/2024, 20:38

240325-zezs6shb67 3

25/03/2024, 20:36

240325-zdscpshb45 3

Analysis

  • max time kernel
    29s
  • max time network
    34s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25/03/2024, 20:36

General

  • Target

    Prefetch/7ZFM.EXE-56DE4F9A.pf

  • Size

    12KB

  • MD5

    dd30415e3221439ddd88d9e7676480ac

  • SHA1

    f1cb9de9987eabc7b15777cd28f26389094a4f6a

  • SHA256

    27ced795d64fd279a3db17ab57169d3ab40d709af8aad26a2d4d14d9f2039e3b

  • SHA512

    2c2bc1c3a7721d161cd301e02e809fa099e63b1292494d7a0d0cf1a2d7dd963bb03b818e8ffb4802a12d9bcdd13ac04c8b117775fd3b60c949475914e6d216c8

  • SSDEEP

    384:sbiQggkgvSwkixL5jMfrJmpf0+eOqFfZZ:s2QMgpN5AzOUf3

Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Modifies registry class 2 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Windows\system32\cmd.exe
    cmd /c C:\Users\Admin\AppData\Local\Temp\Prefetch\7ZFM.EXE-56DE4F9A.pf
    1⤵
    • Modifies registry class
    PID:1752
  • C:\Windows\system32\OpenWith.exe
    C:\Windows\system32\OpenWith.exe -Embedding
    1⤵
    • Modifies registry class
    • Suspicious use of SetWindowsHookEx
    PID:1664

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads