Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    124s
  • max time network
    128s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    03/08/2024, 01:06

General

  • Target

    ventoy-1.0.99/VentoyPlugson.exe

  • Size

    364KB

  • MD5

    38f18ebb5b81b4481b732f68d2b9fe90

  • SHA1

    eae6a3ea6b5b8ac5ccafcc6dd0bbdbb07d6ee6c0

  • SHA256

    a27bef270abb8e0649358d89a004573b45156c7a2bb520fb62cfe1f50300145b

  • SHA512

    9c38a92d015f8524b28d5b99c83f6923f2505cd65817e11b8079201148f0299cb38646bdbb8fb5f64c97b178507cf8a851c3edb38fb442f0caebfdc0482c2749

  • SSDEEP

    6144:l/C8Y4XmCtaOInjZpAbxdxDcWcnR4bfXfwiSeias+8xHgbYpj+w8NO0ctwxepgP7:l/J+CtaxnjZpAbxdxDcWcnR4bfXfwiSO

Score
6/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\ventoy-1.0.99\VentoyPlugson.exe
    "C:\Users\Admin\AppData\Local\Temp\ventoy-1.0.99\VentoyPlugson.exe"
    1⤵
    • Enumerates connected drives
    • System Location Discovery: System Language Discovery
    PID:1472
  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=4348,i,1828333185976713750,7918646547767660928,262144 --variations-seed-version --mojo-platform-channel-handle=3060 /prefetch:8
    1⤵
      PID:3668

    Network

    MITRE ATT&CK Enterprise v15

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Users\Admin\AppData\Local\Temp\ventoy-1.0.99\VentoyPlugson.log

      Filesize

      1KB

      MD5

      dfa8a3cbab13f5a135e2ba452242b271

      SHA1

      5eb98a034e41c04ea9074cdfd533ccb9ca161e4a

      SHA256

      b1fe7a6967632ce9fc5c9029cdc5dcad94407484fc905f28ee840e0c9a6f08db

      SHA512

      b724a758a9e1e76c10d9616c71a70104f73c7132e231bd173bba0b77c79c75b3026fb3069020190770fe73f8dcda1e9db082d62c2801ef6b1385e6955f765103