Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    136s
  • max time network
    154s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    16/07/2024, 09:35

General

  • Target

    Blue.Cat's.All.Plugins.Pack.2024.3.CE.rar

  • Size

    347.9MB

  • MD5

    2b6db5f6dc831670ef1f5dcdd5ecb21c

  • SHA1

    5fdd92c47d2381fb698700398bfbe8d2f467442f

  • SHA256

    b45d772d6796da458a3e294638673a2ec47febeb79aa9207229b79e0c448b6b7

  • SHA512

    fb659f123d2e3982e57ab39a8a074e04761cc49c247ad7c879820681711d2787d6675179e432920514dd59242e56290754766d8a40c38889246007593fb6c726

  • SSDEEP

    6291456:Ld2XewVIgYs43y4BANJDIynnWsXBDQ+qI0cknkhhMMVMWZcasDgwHn9R:oXmgC3y4BANdZnWsxsfxihFGWSae/Hf

Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Modifies registry class 2 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 33 IoCs

Processes

  • C:\Windows\system32\cmd.exe
    cmd /c C:\Users\Admin\AppData\Local\Temp\Blue.Cat's.All.Plugins.Pack.2024.3.CE.rar
    1⤵
    • Modifies registry class
    PID:3712
  • C:\Windows\system32\OpenWith.exe
    C:\Windows\system32\OpenWith.exe -Embedding
    1⤵
    • Modifies registry class
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:5104

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads