Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    92s
  • max time network
    95s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240426-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
  • submitted
    09/06/2024, 23:05

General

  • Target

    Update Maker.exe

  • Size

    373KB

  • MD5

    02570bd3748f462a768b17fed55ab9d3

  • SHA1

    337826a0c15a1b1663fd3ba95798abaeba53c645

  • SHA256

    685a1038534a894b1ae77a07ac18886d419a0581e7864d8d6dba87f1c90d5ee6

  • SHA512

    16f38450bb95ee50fb6c5d9e67dbeaf33a7a76aee17136ea7b29d7ae03baa676ff0270963133a0a703ec234719dd8bc4ab432354aa87ec25c966087db1e76bdf

  • SSDEEP

    6144:DsPdPBxBSlA1VlVXpwwOzT9aoAsRVITb6EQjVmv7TVNXK6onQvhefhb8Zw:DAdZoAT5wHzTgoAsRVITbxQZmPVzphI9

Score
6/10

Malware Config

Signatures

  • Drops desktop.ini file(s) 1 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Modifies registry class 2 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Update Maker.exe
    "C:\Users\Admin\AppData\Local\Temp\Update Maker.exe"
    1⤵
    • Drops desktop.ini file(s)
    • Modifies registry class
    • Suspicious behavior: GetForegroundWindowSpam
    PID:2120

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2120-0-0x00007FFA0F183000-0x00007FFA0F185000-memory.dmp

    Filesize

    8KB

  • memory/2120-1-0x0000018B07620000-0x0000018B07684000-memory.dmp

    Filesize

    400KB

  • memory/2120-2-0x00007FFA0F180000-0x00007FFA0FC41000-memory.dmp

    Filesize

    10.8MB

  • memory/2120-3-0x00007FFA0F183000-0x00007FFA0F185000-memory.dmp

    Filesize

    8KB

  • memory/2120-4-0x00007FFA0F180000-0x00007FFA0FC41000-memory.dmp

    Filesize

    10.8MB

  • memory/2120-5-0x00007FFA0F180000-0x00007FFA0FC41000-memory.dmp

    Filesize

    10.8MB

  • memory/2120-6-0x00007FFA0F180000-0x00007FFA0FC41000-memory.dmp

    Filesize

    10.8MB