Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    34s
  • max time network
    38s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240426-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
  • submitted
    08/05/2024, 10:33

General

  • Target

    Launcher.bat

  • Size

    544B

  • MD5

    17033b44988e812ebade9022cba3584f

  • SHA1

    3c98c9f36212cfeec679057cabb1ea5d4bffb1a1

  • SHA256

    deda21bef6613c01484a7c219070f1c510d96a31373a9561e31a8e45b3c94473

  • SHA512

    9f54c72cafeedb4b332e8c4d438e88475d1757ea4ffdf23d13d0f1bae55806b3fe58cf48002085f5a867c5d8906c4b7674584c4070288e35026037cdc33eb282

Score
6/10

Malware Config

Signatures

  • Looks up external IP address via web service 1 IoCs

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of WriteProcessMemory 5 IoCs

Processes

  • C:\Windows\system32\cmd.exe
    C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Launcher.bat"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:536
    • C:\Windows\system32\cacls.exe
      "C:\Windows\system32\cacls.exe" "C:\Windows\system32\config\system"
      2⤵
        PID:4856
      • C:\Users\Admin\AppData\Local\Temp\compiler.exe
        compiler.exe config
        2⤵
          PID:3652

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/3652-29-0x000000007F570000-0x000000007F580000-memory.dmp

        Filesize

        64KB

      • memory/3652-63-0x000000007F570000-0x000000007F580000-memory.dmp

        Filesize

        64KB

      • memory/3652-79-0x0000000003000000-0x0000000003001000-memory.dmp

        Filesize

        4KB

      • memory/3652-83-0x0000000003000000-0x0000000003001000-memory.dmp

        Filesize

        4KB

      • memory/3652-82-0x0000000003000000-0x0000000003001000-memory.dmp

        Filesize

        4KB

      • memory/3652-81-0x0000000003000000-0x0000000003001000-memory.dmp

        Filesize

        4KB

      • memory/3652-80-0x0000000003000000-0x0000000003001000-memory.dmp

        Filesize

        4KB

      • memory/3652-62-0x000000007F570000-0x000000007F580000-memory.dmp

        Filesize

        64KB

      • memory/3652-61-0x000000007F570000-0x000000007F580000-memory.dmp

        Filesize

        64KB

      • memory/3652-60-0x000000007F570000-0x000000007F580000-memory.dmp

        Filesize

        64KB

      • memory/3652-59-0x000000007F570000-0x000000007F580000-memory.dmp

        Filesize

        64KB

      • memory/3652-58-0x000000007F570000-0x000000007F580000-memory.dmp

        Filesize

        64KB

      • memory/3652-57-0x000000007F570000-0x000000007F580000-memory.dmp

        Filesize

        64KB

      • memory/3652-56-0x000000007F570000-0x000000007F580000-memory.dmp

        Filesize

        64KB

      • memory/3652-55-0x000000007F570000-0x000000007F580000-memory.dmp

        Filesize

        64KB

      • memory/3652-54-0x000000007F570000-0x000000007F580000-memory.dmp

        Filesize

        64KB

      • memory/3652-53-0x000000007F570000-0x000000007F580000-memory.dmp

        Filesize

        64KB

      • memory/3652-52-0x000000007F570000-0x000000007F580000-memory.dmp

        Filesize

        64KB

      • memory/3652-51-0x000000007F570000-0x000000007F580000-memory.dmp

        Filesize

        64KB

      • memory/3652-50-0x000000007F570000-0x000000007F580000-memory.dmp

        Filesize

        64KB

      • memory/3652-49-0x000000007F570000-0x000000007F580000-memory.dmp

        Filesize

        64KB

      • memory/3652-48-0x000000007F570000-0x000000007F580000-memory.dmp

        Filesize

        64KB

      • memory/3652-47-0x000000007F570000-0x000000007F580000-memory.dmp

        Filesize

        64KB

      • memory/3652-46-0x000000007F570000-0x000000007F580000-memory.dmp

        Filesize

        64KB

      • memory/3652-45-0x000000007F570000-0x000000007F580000-memory.dmp

        Filesize

        64KB

      • memory/3652-44-0x000000007F570000-0x000000007F580000-memory.dmp

        Filesize

        64KB

      • memory/3652-43-0x000000007F570000-0x000000007F580000-memory.dmp

        Filesize

        64KB

      • memory/3652-42-0x000000007F570000-0x000000007F580000-memory.dmp

        Filesize

        64KB

      • memory/3652-41-0x000000007F570000-0x000000007F580000-memory.dmp

        Filesize

        64KB

      • memory/3652-40-0x000000007F570000-0x000000007F580000-memory.dmp

        Filesize

        64KB

      • memory/3652-39-0x000000007F570000-0x000000007F580000-memory.dmp

        Filesize

        64KB

      • memory/3652-38-0x000000007F570000-0x000000007F580000-memory.dmp

        Filesize

        64KB

      • memory/3652-37-0x000000007F570000-0x000000007F580000-memory.dmp

        Filesize

        64KB

      • memory/3652-36-0x000000007F570000-0x000000007F580000-memory.dmp

        Filesize

        64KB

      • memory/3652-35-0x000000007F570000-0x000000007F580000-memory.dmp

        Filesize

        64KB

      • memory/3652-34-0x000000007F570000-0x000000007F580000-memory.dmp

        Filesize

        64KB

      • memory/3652-33-0x000000007F570000-0x000000007F580000-memory.dmp

        Filesize

        64KB

      • memory/3652-32-0x000000007F570000-0x000000007F580000-memory.dmp

        Filesize

        64KB

      • memory/3652-31-0x000000007F570000-0x000000007F580000-memory.dmp

        Filesize

        64KB

      • memory/3652-30-0x000000007F570000-0x000000007F580000-memory.dmp

        Filesize

        64KB

      • memory/3652-27-0x000000007F570000-0x000000007F580000-memory.dmp

        Filesize

        64KB

      • memory/3652-26-0x000000007F570000-0x000000007F580000-memory.dmp

        Filesize

        64KB

      • memory/3652-25-0x000000007F570000-0x000000007F580000-memory.dmp

        Filesize

        64KB

      • memory/3652-22-0x000000007F570000-0x000000007F580000-memory.dmp

        Filesize

        64KB

      • memory/3652-23-0x000000007F570000-0x000000007F580000-memory.dmp

        Filesize

        64KB

      • memory/3652-21-0x000000007F570000-0x000000007F580000-memory.dmp

        Filesize

        64KB

      • memory/3652-19-0x000000007F570000-0x000000007F580000-memory.dmp

        Filesize

        64KB

      • memory/3652-20-0x000000007F570000-0x000000007F580000-memory.dmp

        Filesize

        64KB

      • memory/3652-18-0x000000007F570000-0x000000007F580000-memory.dmp

        Filesize

        64KB

      • memory/3652-17-0x000000007F570000-0x000000007F580000-memory.dmp

        Filesize

        64KB

      • memory/3652-16-0x000000007F570000-0x000000007F580000-memory.dmp

        Filesize

        64KB

      • memory/3652-15-0x000000007F570000-0x000000007F580000-memory.dmp

        Filesize

        64KB

      • memory/3652-14-0x000000007F570000-0x000000007F580000-memory.dmp

        Filesize

        64KB

      • memory/3652-13-0x000000007F570000-0x000000007F580000-memory.dmp

        Filesize

        64KB

      • memory/3652-12-0x000000007F570000-0x000000007F580000-memory.dmp

        Filesize

        64KB

      • memory/3652-11-0x000000007F570000-0x000000007F580000-memory.dmp

        Filesize

        64KB

      • memory/3652-10-0x000000007F570000-0x000000007F580000-memory.dmp

        Filesize

        64KB

      • memory/3652-9-0x000000007F570000-0x000000007F580000-memory.dmp

        Filesize

        64KB

      • memory/3652-8-0x000000007F570000-0x000000007F580000-memory.dmp

        Filesize

        64KB

      • memory/3652-7-0x000000007F570000-0x000000007F580000-memory.dmp

        Filesize

        64KB

      • memory/3652-6-0x000000007F570000-0x000000007F580000-memory.dmp

        Filesize

        64KB

      • memory/3652-5-0x000000007F570000-0x000000007F580000-memory.dmp

        Filesize

        64KB

      • memory/3652-4-0x000000007F570000-0x000000007F580000-memory.dmp

        Filesize

        64KB

      • memory/3652-3-0x000000007F570000-0x000000007F580000-memory.dmp

        Filesize

        64KB

      • memory/3652-2-0x000000007F570000-0x000000007F580000-memory.dmp

        Filesize

        64KB

      • memory/3652-1-0x000000007F570000-0x000000007F580000-memory.dmp

        Filesize

        64KB

      • memory/3652-28-0x000000007F570000-0x000000007F580000-memory.dmp

        Filesize

        64KB

      • memory/3652-24-0x000000007F570000-0x000000007F580000-memory.dmp

        Filesize

        64KB

      • memory/3652-0-0x000000007F570000-0x000000007F580000-memory.dmp

        Filesize

        64KB