Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    150s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240730-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240730-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01/08/2024, 21:33

General

  • Target

    fabric-installer-1.0.1.exe

  • Size

    449KB

  • MD5

    7f0502234a4af4bb9ee0b35ee38b8711

  • SHA1

    e708d55f12586a153770bafa4b7fbfa8441b1409

  • SHA256

    d90987a8f7a56cd9c09f69585de0ee6241c326f5b41399b2a8319d03fe6ce64e

  • SHA512

    4dc60b1c4da89d3f40456ca54665c797816e42fa1e44e9b2873f799ccf2a4f834732b2854e3f8491e1ab1be562e7d7528fef19acb49d072a63a668e7e5468320

  • SSDEEP

    6144:nI+0wPnAFavZtK9qEgsdjMpgmo6KlspZpP5OLhmsGpAiXx74syabpA+J:BPnAFSS36lKmPpemsGmiXxVfnJ

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious use of SetWindowsHookEx 2 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\fabric-installer-1.0.1.exe
    "C:\Users\Admin\AppData\Local\Temp\fabric-installer-1.0.1.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:4636
    • C:\Program Files (x86)\Common Files\Oracle\Java\javapath\javaw.exe
      "javaw.exe" "-version"
      2⤵
        PID:4716
      • C:\Program Files (x86)\Common Files\Oracle\Java\javapath\javaw.exe
        "javaw.exe" "-jar" "C:\Users\Admin\AppData\Local\Temp\fabric-installer-1.0.1.exe" "-fabricInstallerBootstrap" "true"
        2⤵
        • Suspicious use of SetWindowsHookEx
        PID:1044

    Network

    MITRE ATT&CK Enterprise v15

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1044-16-0x000001DE80000000-0x000001DE80270000-memory.dmp

      Filesize

      2.4MB

    • memory/1044-26-0x000001DEF3860000-0x000001DEF3861000-memory.dmp

      Filesize

      4KB

    • memory/1044-30-0x000001DEF3860000-0x000001DEF3861000-memory.dmp

      Filesize

      4KB

    • memory/1044-33-0x000001DE80270000-0x000001DE80280000-memory.dmp

      Filesize

      64KB

    • memory/1044-35-0x000001DE80280000-0x000001DE80290000-memory.dmp

      Filesize

      64KB

    • memory/1044-39-0x000001DE802A0000-0x000001DE802B0000-memory.dmp

      Filesize

      64KB

    • memory/1044-38-0x000001DE80290000-0x000001DE802A0000-memory.dmp

      Filesize

      64KB

    • memory/1044-42-0x000001DE802B0000-0x000001DE802C0000-memory.dmp

      Filesize

      64KB

    • memory/1044-43-0x000001DE802C0000-0x000001DE802D0000-memory.dmp

      Filesize

      64KB

    • memory/1044-45-0x000001DE802D0000-0x000001DE802E0000-memory.dmp

      Filesize

      64KB

    • memory/1044-47-0x000001DE802E0000-0x000001DE802F0000-memory.dmp

      Filesize

      64KB

    • memory/1044-49-0x000001DE802F0000-0x000001DE80300000-memory.dmp

      Filesize

      64KB

    • memory/1044-52-0x000001DE80300000-0x000001DE80310000-memory.dmp

      Filesize

      64KB

    • memory/1044-51-0x000001DE80000000-0x000001DE80270000-memory.dmp

      Filesize

      2.4MB

    • memory/1044-57-0x000001DE80320000-0x000001DE80330000-memory.dmp

      Filesize

      64KB

    • memory/1044-56-0x000001DE80310000-0x000001DE80320000-memory.dmp

      Filesize

      64KB

    • memory/1044-59-0x000001DE80270000-0x000001DE80280000-memory.dmp

      Filesize

      64KB

    • memory/1044-60-0x000001DE80330000-0x000001DE80340000-memory.dmp

      Filesize

      64KB

    • memory/1044-62-0x000001DE80340000-0x000001DE80350000-memory.dmp

      Filesize

      64KB

    • memory/1044-61-0x000001DE80280000-0x000001DE80290000-memory.dmp

      Filesize

      64KB

    • memory/1044-66-0x000001DE80290000-0x000001DE802A0000-memory.dmp

      Filesize

      64KB

    • memory/1044-69-0x000001DE80360000-0x000001DE80370000-memory.dmp

      Filesize

      64KB

    • memory/1044-68-0x000001DE80350000-0x000001DE80360000-memory.dmp

      Filesize

      64KB

    • memory/1044-67-0x000001DE802A0000-0x000001DE802B0000-memory.dmp

      Filesize

      64KB

    • memory/1044-72-0x000001DE80370000-0x000001DE80380000-memory.dmp

      Filesize

      64KB

    • memory/1044-70-0x000001DE802B0000-0x000001DE802C0000-memory.dmp

      Filesize

      64KB

    • memory/1044-73-0x000001DEF3860000-0x000001DEF3861000-memory.dmp

      Filesize

      4KB

    • memory/1044-75-0x000001DE80380000-0x000001DE80390000-memory.dmp

      Filesize

      64KB

    • memory/1044-74-0x000001DE802C0000-0x000001DE802D0000-memory.dmp

      Filesize

      64KB

    • memory/1044-77-0x000001DE802D0000-0x000001DE802E0000-memory.dmp

      Filesize

      64KB

    • memory/1044-78-0x000001DE80390000-0x000001DE803A0000-memory.dmp

      Filesize

      64KB

    • memory/1044-81-0x000001DE802E0000-0x000001DE802F0000-memory.dmp

      Filesize

      64KB

    • memory/1044-82-0x000001DE803A0000-0x000001DE803B0000-memory.dmp

      Filesize

      64KB

    • memory/1044-83-0x000001DE802F0000-0x000001DE80300000-memory.dmp

      Filesize

      64KB

    • memory/1044-84-0x000001DE803B0000-0x000001DE803C0000-memory.dmp

      Filesize

      64KB

    • memory/1044-88-0x000001DE80300000-0x000001DE80310000-memory.dmp

      Filesize

      64KB

    • memory/1044-92-0x000001DE803D0000-0x000001DE803E0000-memory.dmp

      Filesize

      64KB

    • memory/1044-91-0x000001DE80320000-0x000001DE80330000-memory.dmp

      Filesize

      64KB

    • memory/1044-90-0x000001DE80310000-0x000001DE80320000-memory.dmp

      Filesize

      64KB

    • memory/1044-89-0x000001DE803C0000-0x000001DE803D0000-memory.dmp

      Filesize

      64KB

    • memory/1044-95-0x000001DE80330000-0x000001DE80340000-memory.dmp

      Filesize

      64KB

    • memory/1044-96-0x000001DE803E0000-0x000001DE803F0000-memory.dmp

      Filesize

      64KB

    • memory/1044-100-0x000001DE803F0000-0x000001DE80400000-memory.dmp

      Filesize

      64KB

    • memory/1044-99-0x000001DE80340000-0x000001DE80350000-memory.dmp

      Filesize

      64KB

    • memory/1044-105-0x000001DE80360000-0x000001DE80370000-memory.dmp

      Filesize

      64KB

    • memory/1044-106-0x000001DE80400000-0x000001DE80410000-memory.dmp

      Filesize

      64KB

    • memory/1044-104-0x000001DE80350000-0x000001DE80360000-memory.dmp

      Filesize

      64KB

    • memory/1044-109-0x000001DE80410000-0x000001DE80420000-memory.dmp

      Filesize

      64KB

    • memory/1044-108-0x000001DE80370000-0x000001DE80380000-memory.dmp

      Filesize

      64KB

    • memory/1044-111-0x000001DE80380000-0x000001DE80390000-memory.dmp

      Filesize

      64KB

    • memory/1044-112-0x000001DE80420000-0x000001DE80430000-memory.dmp

      Filesize

      64KB

    • memory/1044-115-0x000001DE80430000-0x000001DE80440000-memory.dmp

      Filesize

      64KB

    • memory/1044-114-0x000001DE80390000-0x000001DE803A0000-memory.dmp

      Filesize

      64KB

    • memory/1044-119-0x000001DE80440000-0x000001DE80450000-memory.dmp

      Filesize

      64KB

    • memory/1044-118-0x000001DE803A0000-0x000001DE803B0000-memory.dmp

      Filesize

      64KB

    • memory/1044-126-0x000001DE80450000-0x000001DE80460000-memory.dmp

      Filesize

      64KB

    • memory/1044-125-0x000001DE803C0000-0x000001DE803D0000-memory.dmp

      Filesize

      64KB

    • memory/1044-124-0x000001DE803B0000-0x000001DE803C0000-memory.dmp

      Filesize

      64KB

    • memory/1044-128-0x000001DE80460000-0x000001DE80470000-memory.dmp

      Filesize

      64KB

    • memory/1044-129-0x000001DE803D0000-0x000001DE803E0000-memory.dmp

      Filesize

      64KB

    • memory/1044-130-0x000001DE80470000-0x000001DE80480000-memory.dmp

      Filesize

      64KB

    • memory/1044-137-0x000001DE80480000-0x000001DE80490000-memory.dmp

      Filesize

      64KB

    • memory/1044-136-0x000001DE803E0000-0x000001DE803F0000-memory.dmp

      Filesize

      64KB

    • memory/1044-139-0x000001DEF3860000-0x000001DEF3861000-memory.dmp

      Filesize

      4KB

    • memory/1044-141-0x000001DE803F0000-0x000001DE80400000-memory.dmp

      Filesize

      64KB

    • memory/1044-142-0x000001DE80490000-0x000001DE804A0000-memory.dmp

      Filesize

      64KB

    • memory/1044-152-0x000001DE804D0000-0x000001DE804E0000-memory.dmp

      Filesize

      64KB

    • memory/1044-151-0x000001DE804C0000-0x000001DE804D0000-memory.dmp

      Filesize

      64KB

    • memory/1044-150-0x000001DE804B0000-0x000001DE804C0000-memory.dmp

      Filesize

      64KB

    • memory/1044-149-0x000001DE804A0000-0x000001DE804B0000-memory.dmp

      Filesize

      64KB

    • memory/1044-148-0x000001DE80400000-0x000001DE80410000-memory.dmp

      Filesize

      64KB

    • memory/1044-156-0x000001DE80410000-0x000001DE80420000-memory.dmp

      Filesize

      64KB

    • memory/1044-157-0x000001DE804E0000-0x000001DE804F0000-memory.dmp

      Filesize

      64KB

    • memory/1044-159-0x000001DE804F0000-0x000001DE80500000-memory.dmp

      Filesize

      64KB

    • memory/1044-158-0x000001DE80420000-0x000001DE80430000-memory.dmp

      Filesize

      64KB

    • memory/1044-165-0x000001DE80500000-0x000001DE80510000-memory.dmp

      Filesize

      64KB

    • memory/1044-168-0x000001DE80520000-0x000001DE80530000-memory.dmp

      Filesize

      64KB

    • memory/1044-167-0x000001DE80440000-0x000001DE80450000-memory.dmp

      Filesize

      64KB

    • memory/1044-175-0x000001DE80550000-0x000001DE80560000-memory.dmp

      Filesize

      64KB

    • memory/1044-174-0x000001DE80540000-0x000001DE80550000-memory.dmp

      Filesize

      64KB

    • memory/1044-173-0x000001DE80530000-0x000001DE80540000-memory.dmp

      Filesize

      64KB

    • memory/1044-172-0x000001DE80450000-0x000001DE80460000-memory.dmp

      Filesize

      64KB

    • memory/1044-166-0x000001DE80510000-0x000001DE80520000-memory.dmp

      Filesize

      64KB

    • memory/1044-163-0x000001DE80430000-0x000001DE80440000-memory.dmp

      Filesize

      64KB

    • memory/1044-177-0x000001DE80460000-0x000001DE80470000-memory.dmp

      Filesize

      64KB

    • memory/1044-179-0x000001DE80570000-0x000001DE80580000-memory.dmp

      Filesize

      64KB

    • memory/1044-178-0x000001DE80560000-0x000001DE80570000-memory.dmp

      Filesize

      64KB

    • memory/1044-186-0x000001DE80580000-0x000001DE80590000-memory.dmp

      Filesize

      64KB

    • memory/1044-185-0x000001DE80470000-0x000001DE80480000-memory.dmp

      Filesize

      64KB

    • memory/1044-189-0x000001DE80480000-0x000001DE80490000-memory.dmp

      Filesize

      64KB

    • memory/1044-190-0x000001DE80490000-0x000001DE804A0000-memory.dmp

      Filesize

      64KB

    • memory/1044-191-0x000001DE804A0000-0x000001DE804B0000-memory.dmp

      Filesize

      64KB

    • memory/1044-194-0x000001DE804D0000-0x000001DE804E0000-memory.dmp

      Filesize

      64KB

    • memory/1044-193-0x000001DE804C0000-0x000001DE804D0000-memory.dmp

      Filesize

      64KB

    • memory/1044-192-0x000001DE804B0000-0x000001DE804C0000-memory.dmp

      Filesize

      64KB

    • memory/1044-195-0x000001DE804E0000-0x000001DE804F0000-memory.dmp

      Filesize

      64KB

    • memory/1044-196-0x000001DE804F0000-0x000001DE80500000-memory.dmp

      Filesize

      64KB

    • memory/1044-197-0x000001DE80500000-0x000001DE80510000-memory.dmp

      Filesize

      64KB

    • memory/1044-206-0x000001DEF3860000-0x000001DEF3861000-memory.dmp

      Filesize

      4KB

    • memory/4716-2-0x0000020E80000000-0x0000020E80270000-memory.dmp

      Filesize

      2.4MB

    • memory/4716-12-0x0000020EFE7A0000-0x0000020EFE7A1000-memory.dmp

      Filesize

      4KB

    • memory/4716-13-0x0000020E80000000-0x0000020E80270000-memory.dmp

      Filesize

      2.4MB