Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
149s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
22/07/2024, 17:46
Static task
static1
Behavioral task
behavioral1
Sample
dzdz.bat
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
dzdz.bat
Resource
win10v2004-20240709-en
General
-
Target
dzdz.bat
-
Size
680B
-
MD5
9ec25835639ed4517e62d7d16aac87cd
-
SHA1
df48246738069fa3139e5a77396165d685631745
-
SHA256
038a7f83021c2213a61297c0b582ac1d87478764457213d93dd2afc60d9f4e45
-
SHA512
2017014f22538d3e1965601bc9facb63116c326244c98c8dd6f267c8b452ca694b8c0904ace6aaa655b1980e66fd31fb38365e07a953bb422c8e5cb48e3efb37
Malware Config
Signatures
-
Delays execution with timeout.exe 64 IoCs
pid Process 1164 timeout.exe 2196 timeout.exe 2352 timeout.exe 1244 timeout.exe 2732 timeout.exe 2516 timeout.exe 2028 timeout.exe 1672 timeout.exe 2652 timeout.exe 2616 timeout.exe 376 timeout.exe 856 timeout.exe 1064 timeout.exe 2160 timeout.exe 1660 timeout.exe 2424 timeout.exe 2252 timeout.exe 796 timeout.exe 2288 timeout.exe 1752 timeout.exe 1584 timeout.exe 2704 timeout.exe 1876 timeout.exe 1664 timeout.exe 2004 timeout.exe 2052 timeout.exe 1952 timeout.exe 2168 timeout.exe 2772 timeout.exe 536 timeout.exe 712 timeout.exe 964 timeout.exe 688 timeout.exe 2188 timeout.exe 904 timeout.exe 1868 timeout.exe 2272 timeout.exe 2572 timeout.exe 2568 timeout.exe 2204 timeout.exe 2796 timeout.exe 604 timeout.exe 2312 timeout.exe 1548 timeout.exe 1572 timeout.exe 2160 timeout.exe 2712 timeout.exe 2616 timeout.exe 2724 timeout.exe 2788 timeout.exe 2460 timeout.exe 2076 timeout.exe 708 timeout.exe 1988 timeout.exe 2520 timeout.exe 2984 timeout.exe 2732 timeout.exe 3040 timeout.exe 2124 timeout.exe 2080 timeout.exe 2596 timeout.exe 1616 timeout.exe 2256 timeout.exe 2032 timeout.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 2368 wrote to memory of 2668 2368 cmd.exe 31 PID 2368 wrote to memory of 2668 2368 cmd.exe 31 PID 2368 wrote to memory of 2668 2368 cmd.exe 31 PID 2368 wrote to memory of 2076 2368 cmd.exe 32 PID 2368 wrote to memory of 2076 2368 cmd.exe 32 PID 2368 wrote to memory of 2076 2368 cmd.exe 32 PID 2368 wrote to memory of 2960 2368 cmd.exe 34 PID 2368 wrote to memory of 2960 2368 cmd.exe 34 PID 2368 wrote to memory of 2960 2368 cmd.exe 34 PID 2368 wrote to memory of 2732 2368 cmd.exe 35 PID 2368 wrote to memory of 2732 2368 cmd.exe 35 PID 2368 wrote to memory of 2732 2368 cmd.exe 35 PID 2368 wrote to memory of 2572 2368 cmd.exe 36 PID 2368 wrote to memory of 2572 2368 cmd.exe 36 PID 2368 wrote to memory of 2572 2368 cmd.exe 36 PID 2368 wrote to memory of 2628 2368 cmd.exe 37 PID 2368 wrote to memory of 2628 2368 cmd.exe 37 PID 2368 wrote to memory of 2628 2368 cmd.exe 37 PID 2368 wrote to memory of 2560 2368 cmd.exe 38 PID 2368 wrote to memory of 2560 2368 cmd.exe 38 PID 2368 wrote to memory of 2560 2368 cmd.exe 38 PID 2368 wrote to memory of 2704 2368 cmd.exe 39 PID 2368 wrote to memory of 2704 2368 cmd.exe 39 PID 2368 wrote to memory of 2704 2368 cmd.exe 39 PID 2368 wrote to memory of 708 2368 cmd.exe 40 PID 2368 wrote to memory of 708 2368 cmd.exe 40 PID 2368 wrote to memory of 708 2368 cmd.exe 40 PID 2368 wrote to memory of 2772 2368 cmd.exe 41 PID 2368 wrote to memory of 2772 2368 cmd.exe 41 PID 2368 wrote to memory of 2772 2368 cmd.exe 41 PID 2368 wrote to memory of 2552 2368 cmd.exe 42 PID 2368 wrote to memory of 2552 2368 cmd.exe 42 PID 2368 wrote to memory of 2552 2368 cmd.exe 42 PID 2368 wrote to memory of 2568 2368 cmd.exe 43 PID 2368 wrote to memory of 2568 2368 cmd.exe 43 PID 2368 wrote to memory of 2568 2368 cmd.exe 43 PID 2368 wrote to memory of 2616 2368 cmd.exe 44 PID 2368 wrote to memory of 2616 2368 cmd.exe 44 PID 2368 wrote to memory of 2616 2368 cmd.exe 44 PID 2368 wrote to memory of 3040 2368 cmd.exe 45 PID 2368 wrote to memory of 3040 2368 cmd.exe 45 PID 2368 wrote to memory of 3040 2368 cmd.exe 45 PID 2368 wrote to memory of 1876 2368 cmd.exe 46 PID 2368 wrote to memory of 1876 2368 cmd.exe 46 PID 2368 wrote to memory of 1876 2368 cmd.exe 46 PID 2368 wrote to memory of 2236 2368 cmd.exe 47 PID 2368 wrote to memory of 2236 2368 cmd.exe 47 PID 2368 wrote to memory of 2236 2368 cmd.exe 47 PID 2368 wrote to memory of 1528 2368 cmd.exe 48 PID 2368 wrote to memory of 1528 2368 cmd.exe 48 PID 2368 wrote to memory of 1528 2368 cmd.exe 48 PID 2368 wrote to memory of 2344 2368 cmd.exe 49 PID 2368 wrote to memory of 2344 2368 cmd.exe 49 PID 2368 wrote to memory of 2344 2368 cmd.exe 49 PID 2368 wrote to memory of 2452 2368 cmd.exe 50 PID 2368 wrote to memory of 2452 2368 cmd.exe 50 PID 2368 wrote to memory of 2452 2368 cmd.exe 50 PID 2368 wrote to memory of 376 2368 cmd.exe 51 PID 2368 wrote to memory of 376 2368 cmd.exe 51 PID 2368 wrote to memory of 376 2368 cmd.exe 51 PID 2368 wrote to memory of 2948 2368 cmd.exe 52 PID 2368 wrote to memory of 2948 2368 cmd.exe 52 PID 2368 wrote to memory of 2948 2368 cmd.exe 52 PID 2368 wrote to memory of 2516 2368 cmd.exe 53
Processes
-
C:\Windows\system32\cmd.execmd /c "C:\Users\Admin\AppData\Local\Temp\dzdz.bat"1⤵
- Suspicious use of WriteProcessMemory
PID:2368 -
C:\Windows\system32\timeout.exetimeout /t 12⤵PID:2668
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵
- Delays execution with timeout.exe
PID:2076
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵PID:2960
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵
- Delays execution with timeout.exe
PID:2732
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵PID:2572
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵PID:2628
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵PID:2560
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵
- Delays execution with timeout.exe
PID:2704
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵
- Delays execution with timeout.exe
PID:708
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵PID:2772
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵PID:2552
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵PID:2568
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵
- Delays execution with timeout.exe
PID:2616
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵PID:3040
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵
- Delays execution with timeout.exe
PID:1876
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵PID:2236
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵PID:1528
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵PID:2344
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵PID:2452
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵
- Delays execution with timeout.exe
PID:376
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵PID:2948
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵
- Delays execution with timeout.exe
PID:2516
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵PID:2992
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵PID:2316
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵
- Delays execution with timeout.exe
PID:2052
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵
- Delays execution with timeout.exe
PID:2080
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵PID:2804
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵PID:1000
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵PID:2524
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵
- Delays execution with timeout.exe
PID:1164
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵
- Delays execution with timeout.exe
PID:2596
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵PID:2860
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵PID:2876
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵
- Delays execution with timeout.exe
PID:2796
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵
- Delays execution with timeout.exe
PID:688
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵PID:408
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵
- Delays execution with timeout.exe
PID:2028
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵PID:1820
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵PID:1924
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵PID:1176
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵PID:1980
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵
- Delays execution with timeout.exe
PID:2252
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵
- Delays execution with timeout.exe
PID:796
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵
- Delays execution with timeout.exe
PID:536
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵
- Delays execution with timeout.exe
PID:604
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵
- Delays execution with timeout.exe
PID:1952
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵
- Delays execution with timeout.exe
PID:2188
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵
- Delays execution with timeout.exe
PID:2312
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵PID:2200
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵PID:2072
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵
- Delays execution with timeout.exe
PID:2168
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵
- Delays execution with timeout.exe
PID:2288
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵
- Delays execution with timeout.exe
PID:1988
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵
- Delays execution with timeout.exe
PID:1664
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵PID:2500
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵PID:2132
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵PID:1928
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵
- Delays execution with timeout.exe
PID:2160
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵PID:2320
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵
- Delays execution with timeout.exe
PID:1616
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵PID:1524
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵PID:828
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵PID:944
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵
- Delays execution with timeout.exe
PID:2256
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵PID:1636
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵PID:308
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵
- Delays execution with timeout.exe
PID:856
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵PID:2420
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵
- Delays execution with timeout.exe
PID:1548
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵
- Delays execution with timeout.exe
PID:2032
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵PID:2376
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵
- Delays execution with timeout.exe
PID:2196
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵
- Delays execution with timeout.exe
PID:2004
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵PID:2340
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵PID:2384
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵PID:1736
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵
- Delays execution with timeout.exe
PID:1752
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵PID:2232
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵PID:1648
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵PID:2448
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵PID:1424
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵PID:1776
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵
- Delays execution with timeout.exe
PID:904
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵PID:2760
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵PID:3024
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵PID:2264
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵
- Delays execution with timeout.exe
PID:1572
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵
- Delays execution with timeout.exe
PID:1672
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵PID:2644
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵PID:2688
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵PID:2228
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵
- Delays execution with timeout.exe
PID:2732
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵
- Delays execution with timeout.exe
PID:2572
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵PID:2784
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵PID:1960
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵
- Delays execution with timeout.exe
PID:2712
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵
- Delays execution with timeout.exe
PID:2652
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵
- Delays execution with timeout.exe
PID:2772
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵PID:2552
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵
- Delays execution with timeout.exe
PID:2568
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵
- Delays execution with timeout.exe
PID:2616
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵
- Delays execution with timeout.exe
PID:3040
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵
- Delays execution with timeout.exe
PID:2352
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵PID:3048
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵PID:2716
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵
- Delays execution with timeout.exe
PID:1244
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵
- Delays execution with timeout.exe
PID:1584
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵PID:1568
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵PID:2720
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵
- Delays execution with timeout.exe
PID:2520
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵
- Delays execution with timeout.exe
PID:2984
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵
- Delays execution with timeout.exe
PID:2724
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵PID:1744
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵
- Delays execution with timeout.exe
PID:2124
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵PID:2916
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵PID:2244
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵PID:1348
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵PID:2932
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵PID:2792
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵
- Delays execution with timeout.exe
PID:2788
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵PID:2868
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵PID:2900
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵PID:2908
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵PID:1688
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵
- Delays execution with timeout.exe
PID:1064
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵
- Delays execution with timeout.exe
PID:1868
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵PID:1924
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵PID:1492
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵PID:1172
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵PID:2248
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵PID:796
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵PID:536
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵PID:332
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵PID:940
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵
- Delays execution with timeout.exe
PID:712
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵
- Delays execution with timeout.exe
PID:1660
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵PID:2332
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵PID:2504
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵
- Delays execution with timeout.exe
PID:2204
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵PID:2056
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵PID:1740
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵
- Delays execution with timeout.exe
PID:2460
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵PID:2000
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵PID:1816
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵PID:1196
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵
- Delays execution with timeout.exe
PID:2272
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵
- Delays execution with timeout.exe
PID:2160
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵
- Delays execution with timeout.exe
PID:964
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵PID:1616
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵
- Delays execution with timeout.exe
PID:2424
-
-
C:\Windows\system32\timeout.exetimeout /t 12⤵PID:1544
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\Desktop\DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD.txt
Filesize22B
MD5df5de5582cb130a01754ec9d34188a0e
SHA154db9afb32cbb74e691b956b14f87cf18d1f011b
SHA2564c8ad7b4aae2ad86094161b27c40f4c8680d4f1bdc50ef3456c4738e800ac30c
SHA5126577ef81049ecd6d97f5a5d4fdc38c52c79d6877804422e83eeec5006e6cd7c1ee86fbb61fc73a1268afa5b049de505315b6b0720b314565626ec870834c1029