Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    30s
  • max time network
    29s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    28/03/2024, 00:14

General

  • Target

    Launcher.bat

  • Size

    544B

  • MD5

    17033b44988e812ebade9022cba3584f

  • SHA1

    3c98c9f36212cfeec679057cabb1ea5d4bffb1a1

  • SHA256

    deda21bef6613c01484a7c219070f1c510d96a31373a9561e31a8e45b3c94473

  • SHA512

    9f54c72cafeedb4b332e8c4d438e88475d1757ea4ffdf23d13d0f1bae55806b3fe58cf48002085f5a867c5d8906c4b7674584c4070288e35026037cdc33eb282

Score
6/10

Malware Config

Signatures

  • Looks up external IP address via web service 1 IoCs

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of WriteProcessMemory 5 IoCs

Processes

  • C:\Windows\system32\cmd.exe
    C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Launcher.bat"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:400
    • C:\Windows\system32\cacls.exe
      "C:\Windows\system32\cacls.exe" "C:\Windows\system32\config\system"
      2⤵
        PID:4984
      • C:\Users\Admin\AppData\Local\Temp\compiler.exe
        compiler.exe config
        2⤵
          PID:452

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/452-1-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

        Filesize

        64KB

      • memory/452-0-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

        Filesize

        64KB

      • memory/452-2-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

        Filesize

        64KB

      • memory/452-3-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

        Filesize

        64KB

      • memory/452-4-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

        Filesize

        64KB

      • memory/452-6-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

        Filesize

        64KB

      • memory/452-5-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

        Filesize

        64KB

      • memory/452-7-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

        Filesize

        64KB

      • memory/452-8-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

        Filesize

        64KB

      • memory/452-9-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

        Filesize

        64KB

      • memory/452-10-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

        Filesize

        64KB

      • memory/452-11-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

        Filesize

        64KB

      • memory/452-12-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

        Filesize

        64KB

      • memory/452-13-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

        Filesize

        64KB

      • memory/452-14-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

        Filesize

        64KB

      • memory/452-15-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

        Filesize

        64KB

      • memory/452-16-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

        Filesize

        64KB

      • memory/452-17-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

        Filesize

        64KB

      • memory/452-18-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

        Filesize

        64KB

      • memory/452-19-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

        Filesize

        64KB

      • memory/452-20-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

        Filesize

        64KB

      • memory/452-22-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

        Filesize

        64KB

      • memory/452-21-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

        Filesize

        64KB

      • memory/452-23-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

        Filesize

        64KB

      • memory/452-24-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

        Filesize

        64KB

      • memory/452-25-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

        Filesize

        64KB

      • memory/452-26-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

        Filesize

        64KB

      • memory/452-27-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

        Filesize

        64KB

      • memory/452-29-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

        Filesize

        64KB

      • memory/452-28-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

        Filesize

        64KB

      • memory/452-30-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

        Filesize

        64KB

      • memory/452-31-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

        Filesize

        64KB

      • memory/452-32-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

        Filesize

        64KB

      • memory/452-33-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

        Filesize

        64KB

      • memory/452-34-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

        Filesize

        64KB

      • memory/452-35-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

        Filesize

        64KB

      • memory/452-36-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

        Filesize

        64KB

      • memory/452-37-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

        Filesize

        64KB

      • memory/452-38-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

        Filesize

        64KB

      • memory/452-39-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

        Filesize

        64KB

      • memory/452-41-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

        Filesize

        64KB

      • memory/452-40-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

        Filesize

        64KB

      • memory/452-42-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

        Filesize

        64KB

      • memory/452-43-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

        Filesize

        64KB

      • memory/452-44-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

        Filesize

        64KB

      • memory/452-45-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

        Filesize

        64KB

      • memory/452-46-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

        Filesize

        64KB

      • memory/452-47-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

        Filesize

        64KB

      • memory/452-48-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

        Filesize

        64KB

      • memory/452-49-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

        Filesize

        64KB

      • memory/452-50-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

        Filesize

        64KB

      • memory/452-51-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

        Filesize

        64KB

      • memory/452-52-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

        Filesize

        64KB

      • memory/452-53-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

        Filesize

        64KB

      • memory/452-54-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

        Filesize

        64KB

      • memory/452-55-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

        Filesize

        64KB

      • memory/452-56-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

        Filesize

        64KB

      • memory/452-57-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

        Filesize

        64KB

      • memory/452-58-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

        Filesize

        64KB

      • memory/452-59-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

        Filesize

        64KB

      • memory/452-60-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

        Filesize

        64KB

      • memory/452-61-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

        Filesize

        64KB

      • memory/452-62-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

        Filesize

        64KB

      • memory/452-63-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

        Filesize

        64KB