Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
94s -
max time network
105s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
14/07/2024, 22:26
General
-
Target
res/mods/xfw_packages/xfw_actionscript/python/__init__.pyc
-
Size
974B
-
MD5
db61ec3eeabefe2d09e9051ba9caa58e
-
SHA1
8ee6d631635e0a65395c0aa5103867a36567ee5c
-
SHA256
feffe30bba11daf8918e7cbfa635ef82dd3a9e8cfec50ccf9b00acf90d6014d9
-
SHA512
97fa8990b197087e6b2d418c18f51a26e793bd442ba15c0afbea3703a4bd86c9d03d1e2de0e22993ecb339ba8a50761bb4fca8437c9e88ef2d2b54d55b96b3f2
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\res\mods\xfw_packages\xfw_actionscript\python\__init__.pyc1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx