Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
134s -
max time network
136s -
platform
windows10-1703_x64 -
resource
win10-20240404-en -
resource tags
-
submitted
26/04/2024, 14:55
General
-
Target
Origen_Police.rar
-
Size
19.6MB
-
MD5
c5bb490f85c829e92206da94aaea2d16
-
SHA1
c8b2954e0cbf6da2e863662e4c3e1cd79f1c0066
-
SHA256
637113aef8aaa292a615650b90844dd4a26c021e8930a3fed72c8b735322949e
-
SHA512
5ab9d93590fbf08f188b44aa531807254de4cd0e795ae9b3e22361baedeb10ed44d372a0d13251b80e632e8ff7fd2283de60f922ed91ce5758bbad80e1122373
-
SSDEEP
393216:yRCFut9zXTW0towkorViyivzcFDD5hJGu+ScBnfFj:yH7XkopifodhUBfFj
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of SetWindowsHookEx 17 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\Origen_Police.rar1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx