Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
95s -
max time network
100s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
08/08/2024, 14:44
Static task
static1
Behavioral task
behavioral1
Sample
cab.zip
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
cab.zip
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
parcel_label_photo.vhdx
Resource
win7-20240729-en
Behavioral task
behavioral4
Sample
parcel_label_photo.vhdx
Resource
win10v2004-20240802-en
General
-
Target
parcel_label_photo.vhdx
-
Size
36.0MB
-
MD5
48806b8dd97db25041bc3678a095dba4
-
SHA1
9c1a36fd5ca76390d4a102e1f5e85977d9d22b8c
-
SHA256
6d59388482835a122b9522752ef1c61b249ed12909258fab0aa10de69f3bf26d
-
SHA512
0fd66a64e816eb9ac19d9991e60e6189317fac04f00707dca6531074a48b1bfc5cfcfc76a65f2961a6ec87ee0f30a450443a94eecc3f9e8417cca95dfc8cc359
-
SSDEEP
6144:9rZn7y/EGuH/cpiysa2yuGncYM5YAImUaBe1Y0Pgne8cq1Gt8PbdC:1UDuH/c8ysCuGnNmUaBe1Nm1Y
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-1194130065-3471212556-1656947724-1000_Classes\Local Settings cmd.exe