Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    24/06/2024, 14:57

General

  • Target

    2024-06-24_f273a85f112fea1571b755b55e83f44e_magniber_metamorfo.exe

  • Size

    13.0MB

  • MD5

    f273a85f112fea1571b755b55e83f44e

  • SHA1

    2c314b74e24485a91c80e68b1327edf4a6ea4616

  • SHA256

    eb4f2870e5acb4d3bffb0652cd2397155f260e7e3fbd0aa4b4ce3a86b7af34db

  • SHA512

    1e81c382d500a144a75e8da87e2149fabcc168157785b49f8c4243be36d367a35f55fad40613f4e52a30885f6bdd887b5325e9ac36e4ddbaba5b8ad0326c13bf

  • SSDEEP

    196608:1nC20D8MFxKhdj9O0AoHWrXoLGI+zNLdmODAH06tWnJ1ebrqNH2R7aj0:1nA8ywhdRvbWr49hFH06ttbrqNeaY

Score
1/10

Malware Config

Signatures

  • Modifies registry class 3 IoCs
  • Modifies system certificate store 2 TTPs 10 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-06-24_f273a85f112fea1571b755b55e83f44e_magniber_metamorfo.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-06-24_f273a85f112fea1571b755b55e83f44e_magniber_metamorfo.exe"
    1⤵
    • Modifies registry class
    • Modifies system certificate store
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:2352

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    166788d7ecc49b0e1f6e277b5386676c

    SHA1

    027f16630e5319d2c2f4a0564050c704708799cb

    SHA256

    14eef7992d77522e4d928b6debec991f36fdc84012e7087bc4d00f32456a2c84

    SHA512

    4a880719c29cf3fc932910a1816b67a95e6cb23796e3d28d411df081f841c9adc2667d98f2242f8a18642234b53db213511d34fcbd27a32273bf45859185914c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    59b6d5500e4b8335ea2b0a95d286a755

    SHA1

    4d7bb616ca5d4e3944f6f9b19d5a9010bcf8281e

    SHA256

    31f7a46add6198e8f3198db612c8625ff8c862d2bdd1bfe8204eefc14c908daf

    SHA512

    53d2b9aa6a390b2571faeef3cb6627008ee011e918e80cc2ca91d3c6c934a5e89082d1b4968f87698a559ac419e2cf4ab1e87745be92b69e4b757d64aff078ec

  • C:\Users\Admin\AppData\Local\Temp\Cab22DE.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar23BF.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b