Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
148s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
-
submitted
01/06/2024, 13:23
General
-
Target
gamebox.exe
-
Size
2.4MB
-
MD5
4558c36e4df1405ef56126b4af989032
-
SHA1
3a4c7f5687f38343bb64dc5bf166a47bad834a64
-
SHA256
736e05c713ddb370d3f9c4077bea7c10fc88ef0ea1ff6150dbf3e37420ac821e
-
SHA512
169889670777224bcda076770adc51aba7abd9587ad4e16df1c66bd3853bed6adfddf056d2c952219db694a7f45aa8f7b3efac568f3bd81b265d6bd81c51c537
-
SSDEEP
49152:PB0sUqHdNFjIC7iJi7zV4qJRDjbpnVTcFXH+xcJ+81+In9:PYYdNFv7iJi7zhNjb+XH+6
Malware Config
Signatures
-
Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Suspicious behavior: EnumeratesProcesses 62 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\gamebox.exe"C:\Users\Admin\AppData\Local\Temp\gamebox.exe"1⤵
- Writes to the Master Boot Record (MBR)
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
87B
MD53bac2e5292e1e29e9f14baeae7c07fe3
SHA17061ef7df8accddccea0f233243f84fce0467fda
SHA256b0c85d5868bb7137734a774a0489d19ffe087feb8b54a083d05ccadb206d3690
SHA512b745b25956da34c5c9f890e9dc2b8228873530d0ddd59f24fcc47fd5abadbe39c7518a4424acd6cd64b79e7c845bf9a1f6f2b35f56a60e96d3c004d4eb791074
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB