Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

18/04/2024, 14:42

240418-r22bhsha9t 3

18/04/2024, 14:11

240418-rhr9hagd6y 10

Analysis

  • max time kernel
    144s
  • max time network
    161s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240412-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
  • submitted
    18/04/2024, 14:11

General

  • Target

    Minecraft Install.rar

  • Size

    37.7MB

  • MD5

    489fb7829272e34697126dd5a10b7785

  • SHA1

    5c0e5c43dc60f1db9a226cbd7b23e2fa649e767f

  • SHA256

    f3969e0733a89f9d93925c8a4822deea9aac3e444da6bdc2a037cbd252aa1e82

  • SHA512

    ce23cfed553c68ddac12ff12e16d78e4f0ebbd0df72640183c1afd80f863734d030304aec79711af529cea3028fd151efddb613b6ddeb614af6ad35e0c5e6c0b

  • SSDEEP

    786432:/NuRVXyA1t6MF2Ll8HQgfYujJw+yKzfIu0qRcYHbvu+5ngAtYntgEHI+oBy5:Q9yA1tR+ewgRtRJwHiHSHAeWEMY

Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Modifies registry class 2 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Windows\system32\cmd.exe
    cmd /c "C:\Users\Admin\AppData\Local\Temp\Minecraft Install.rar"
    1⤵
    • Modifies registry class
    PID:1560
  • C:\Windows\system32\OpenWith.exe
    C:\Windows\system32\OpenWith.exe -Embedding
    1⤵
    • Modifies registry class
    • Suspicious use of SetWindowsHookEx
    PID:2608

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads