Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
126s -
max time network
137s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
02/08/2024, 21:27
General
-
Target
dqoqnh5-nati-gr702r.rar
-
Size
439.3MB
-
MD5
b7c95f68469beb6ba229fac51bd39e65
-
SHA1
046a5588a6b5ff477dfa2b3460eef055c4ca3adc
-
SHA256
a97caeea5750215ce3f795d9e309e43ae4afa66ca3092e172ce66688996f0b29
-
SHA512
a3be3e0943eabf5ce1501da063131e9fa8dc7a5978fa7100c594c530cfcc24410314a3c882322e5b9b08c9e77b76709f4814e3ed2fd26c9d6bedcea8375189c4
-
SSDEEP
12582912:+OH0rxbEs4lU2nWmBVeimDMgcHf4pvPgP:+S0h4qUWmBVeimAxH6YP
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\dqoqnh5-nati-gr702r.rar1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx