Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
94s -
max time network
129s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
10/07/2024, 12:18
General
-
Target
ForceKill.exe
-
Size
253KB
-
MD5
fc477743ceaef6633c474cd6281f1f5b
-
SHA1
306bac2c59bae7b7c6000643ca31bbb9583c4a04
-
SHA256
eb4b16d4fb16aeaf06c2a8f231dc65f50a1942b86a7784baa20ea000af286c8c
-
SHA512
a80b2f4ce6ed04e09d1305d883c2abd0ebed47bd3bb68d9be47d039aff7944f099ebf546cd481c9046f8233b86945382efda2e88ff8ab49819983c3da9cb378a
-
SSDEEP
3072:8n6+PdZA6yTI+7caIprQiD1w3uN4FdgLFAoqLG4W53g0KbYoooFKWAnND:gF6c3lQiDGRO14W53g0p
Score
6/10
Malware Config
Signatures
-
Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Suspicious behavior: LoadsDriver 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ForceKill.exe"C:\Users\Admin\AppData\Local\Temp\ForceKill.exe"1⤵
- Writes to the Master Boot Record (MBR)
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
28KB
-
Filesize
28KB
-
Filesize
28KB
-
Filesize
28KB