Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
1382s -
max time network
1167s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
19/05/2024, 20:14
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
PolicyPlus.exe
Resource
win10v2004-20240508-en
1 signatures
1800 seconds
General
-
Target
PolicyPlus.exe
-
Size
363KB
-
MD5
412e1ca22a531bb23f5878e6e3c0bb5b
-
SHA1
842928fd7ae2747e06e7b2b5a5aa1272e4fa992b
-
SHA256
dca4ecd769253d3b4a165a5bbadbb7ce48aa89451b46eb05185f922e931da156
-
SHA512
d2c8af286e88fad2fa9d41112ffd27e2bddf10d95bb3303e16db492f1db0c7c98bf520569bc073267f94b4ffe1b743db46ee0e6bf8bd71711b9681a42bd96cf7
-
SSDEEP
6144:yRjUWuI0O8oo2roRO4T59qyosClB7apUf7CX7RU6NE:t48oo2ssK7RU6m
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 2 IoCs
description ioc Process File created C:\Windows\System32\GroupPolicy\User\Registry.pol PolicyPlus.exe File created C:\Windows\System32\GroupPolicy\Machine\Registry.pol PolicyPlus.exe