Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    28/04/2024, 15:51

General

  • Target

    ReBomb2AppFinal/tcl/http1.0/http.ps1

  • Size

    9KB

  • MD5

    c2092f8ca2d761dfa8c461076d956374

  • SHA1

    90b4648b3bc81c30465b0be83a5db4127a1392fb

  • SHA256

    8c474095a3aba7df5b488f3d35240d6de729e57153980c2a898728b8c407a727

  • SHA512

    09ce408886e2ceaddf70786a15d63af9a930e70cac4286ac9ddd2094c8edcf97a2adc2d3d2659b123f88719340d3b00d9f96e9bc7c8b55192735c290e7d24683

  • SSDEEP

    192:kipkqA3KsZMAikGJ4kIWPa95KTBoF7dg/8YNkgQ4id:TkqWKsZ8kGJ4kIWPaDFzTd

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell.exe -ExecutionPolicy bypass -File C:\Users\Admin\AppData\Local\Temp\ReBomb2AppFinal\tcl\http1.0\http.ps1
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:2392

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2392-4-0x000000001B830000-0x000000001BB12000-memory.dmp

    Filesize

    2.9MB

  • memory/2392-9-0x0000000002EE0000-0x0000000002F60000-memory.dmp

    Filesize

    512KB

  • memory/2392-8-0x0000000002EE0000-0x0000000002F60000-memory.dmp

    Filesize

    512KB

  • memory/2392-7-0x0000000002EE0000-0x0000000002F60000-memory.dmp

    Filesize

    512KB

  • memory/2392-6-0x000007FEF5690000-0x000007FEF602D000-memory.dmp

    Filesize

    9.6MB

  • memory/2392-5-0x0000000001EF0000-0x0000000001EF8000-memory.dmp

    Filesize

    32KB

  • memory/2392-10-0x000007FEF5690000-0x000007FEF602D000-memory.dmp

    Filesize

    9.6MB

  • memory/2392-11-0x0000000002EE0000-0x0000000002F60000-memory.dmp

    Filesize

    512KB

  • memory/2392-12-0x000007FEF5690000-0x000007FEF602D000-memory.dmp

    Filesize

    9.6MB

  • memory/2392-13-0x0000000002EE0000-0x0000000002F60000-memory.dmp

    Filesize

    512KB