Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
144s -
max time network
161s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
02/08/2024, 20:19
General
-
Target
JJS-UI/resources/app.asar/node_modules/safe-buffer/package.json
-
Size
500B
-
MD5
b55e2fba27745164c9cdb610293d470b
-
SHA1
bdf56f6d8cd14a6791c3a42f48e61d0a8ff660e8
-
SHA256
0bb53dcf379ffebc8f8baa2d2a4efc80be25f203509da73cc17864b97cb9556e
-
SHA512
22150dd9b47bf3f92f2417ad484d696c4567d95f35ea47ec61a710b1a10567df504358892f8b1e3fa7930d3c4424c09f90a84b2cb991fc5d3e33228ea50e1766
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\JJS-UI\resources\app.asar\node_modules\safe-buffer\package.json1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx