Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
144s -
max time network
157s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
02/08/2024, 20:19
General
-
Target
JJS-UI/resources/app.asar/node_modules/sshpk/man/man1/sshpk-sign.1
-
Size
2KB
-
MD5
0c5d0859f425c28ce22c5c6af9e6513b
-
SHA1
742f5bb2986ad635eb081bad695573cd6826c96b
-
SHA256
7590244d4561f2e585ad87ea45ace9aad5c633af7083c67dd2a306b874850839
-
SHA512
95346f0f00f8ceeb2dc345e3e99b679af1389753ab360e28518bd5c172ba7fef1a50d91ee5d2f8b1dd63f30484ad3cc520404808fafdaefa9201e071dcbc748b
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\JJS-UI\resources\app.asar\node_modules\sshpk\man\man1\sshpk-sign.11⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx