Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
6Static
static
3KASU PACK ...ER.reg
windows7-x64
6KASU PACK ...ER.reg
windows10-2004-x64
1KASU PACK ...N).bat
windows7-x64
3KASU PACK ...N).bat
windows10-2004-x64
3KASU PACK ...on.reg
windows7-x64
1KASU PACK ...on.reg
windows10-2004-x64
1KASU PACK ...et.reg
windows7-x64
1KASU PACK ...et.reg
windows10-2004-x64
1KASU PACK ...ay.reg
windows7-x64
1KASU PACK ...ay.reg
windows10-2004-x64
1KASU PACK ...me.reg
windows7-x64
1KASU PACK ...me.reg
windows10-2004-x64
1KASU PACK ...GB.reg
windows7-x64
1KASU PACK ...GB.reg
windows10-2004-x64
1KASU PACK ...GB.reg
windows7-x64
1KASU PACK ...GB.reg
windows10-2004-x64
1KASU PACK ...GB.reg
windows7-x64
1KASU PACK ...GB.reg
windows10-2004-x64
1KASU PACK ...GB.reg
windows7-x64
1KASU PACK ...GB.reg
windows10-2004-x64
1KASU PACK ...GB.reg
windows7-x64
1KASU PACK ...GB.reg
windows10-2004-x64
1KASU PACK ...GB.reg
windows7-x64
1KASU PACK ...GB.reg
windows10-2004-x64
1KASU PACK ...GB.reg
windows7-x64
1KASU PACK ...GB.reg
windows10-2004-x64
1KASU PACK ...GB.reg
windows7-x64
1KASU PACK ...GB.reg
windows10-2004-x64
1KASU PACK ...GB.reg
windows7-x64
1KASU PACK ...GB.reg
windows10-2004-x64
1KASU PACK ...GB.reg
windows7-x64
1KASU PACK ...GB.reg
windows10-2004-x64
1Analysis
-
max time kernel
121s -
max time network
134s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
09/08/2024, 21:36
Static task
static1
Behavioral task
behavioral1
Sample
KASU PACK V.3/Ping Tweaker/DNS PING REDUCER.reg
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
KASU PACK V.3/Ping Tweaker/DNS PING REDUCER.reg
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
KASU PACK V.3/Ping Tweaker/KASU PING TWEAKER (RUN AS ADMIN).bat
Resource
win7-20240705-en
Behavioral task
behavioral4
Sample
KASU PACK V.3/Ping Tweaker/KASU PING TWEAKER (RUN AS ADMIN).bat
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
KASU PACK V.3/Ping Tweaker/Ping_Optimization.reg
Resource
win7-20240704-en
Behavioral task
behavioral6
Sample
KASU PACK V.3/Ping Tweaker/Ping_Optimization.reg
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
KASU PACK V.3/Ping Tweaker/Tweaks_internet.reg
Resource
win7-20240704-en
Behavioral task
behavioral8
Sample
KASU PACK V.3/Ping Tweaker/Tweaks_internet.reg
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
KASU PACK V.3/Ping Tweaker/low_ping_and_delay.reg
Resource
win7-20240704-en
Behavioral task
behavioral10
Sample
KASU PACK V.3/Ping Tweaker/low_ping_and_delay.reg
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
KASU PACK V.3/Regedit Tweaks/HoverTime.reg
Resource
win7-20240704-en
Behavioral task
behavioral12
Sample
KASU PACK V.3/Regedit Tweaks/HoverTime.reg
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
KASU PACK V.3/Regedit Tweaks/Ram Tweaks/10GB.reg
Resource
win7-20240708-en
Behavioral task
behavioral14
Sample
KASU PACK V.3/Regedit Tweaks/Ram Tweaks/10GB.reg
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
KASU PACK V.3/Regedit Tweaks/Ram Tweaks/12GB.reg
Resource
win7-20240708-en
Behavioral task
behavioral16
Sample
KASU PACK V.3/Regedit Tweaks/Ram Tweaks/12GB.reg
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
KASU PACK V.3/Regedit Tweaks/Ram Tweaks/16GB.reg
Resource
win7-20240705-en
Behavioral task
behavioral18
Sample
KASU PACK V.3/Regedit Tweaks/Ram Tweaks/16GB.reg
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
KASU PACK V.3/Regedit Tweaks/Ram Tweaks/20GB.reg
Resource
win7-20240704-en
Behavioral task
behavioral20
Sample
KASU PACK V.3/Regedit Tweaks/Ram Tweaks/20GB.reg
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
KASU PACK V.3/Regedit Tweaks/Ram Tweaks/24GB.reg
Resource
win7-20240708-en
Behavioral task
behavioral22
Sample
KASU PACK V.3/Regedit Tweaks/Ram Tweaks/24GB.reg
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
KASU PACK V.3/Regedit Tweaks/Ram Tweaks/2GB.reg
Resource
win7-20240705-en
Behavioral task
behavioral24
Sample
KASU PACK V.3/Regedit Tweaks/Ram Tweaks/2GB.reg
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
KASU PACK V.3/Regedit Tweaks/Ram Tweaks/32GB.reg
Resource
win7-20240704-en
Behavioral task
behavioral26
Sample
KASU PACK V.3/Regedit Tweaks/Ram Tweaks/32GB.reg
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
KASU PACK V.3/Regedit Tweaks/Ram Tweaks/48GB.reg
Resource
win7-20240704-en
Behavioral task
behavioral28
Sample
KASU PACK V.3/Regedit Tweaks/Ram Tweaks/48GB.reg
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
KASU PACK V.3/Regedit Tweaks/Ram Tweaks/4GB.reg
Resource
win7-20240729-en
Behavioral task
behavioral30
Sample
KASU PACK V.3/Regedit Tweaks/Ram Tweaks/4GB.reg
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
KASU PACK V.3/Regedit Tweaks/Ram Tweaks/64GB.reg
Resource
win7-20240708-en
Behavioral task
behavioral32
Sample
KASU PACK V.3/Regedit Tweaks/Ram Tweaks/64GB.reg
Resource
win10v2004-20240802-en
General
-
Target
KASU PACK V.3/Ping Tweaker/KASU PING TWEAKER (RUN AS ADMIN).bat
-
Size
1KB
-
MD5
aaf93684d2b71892aad5185e018cc137
-
SHA1
2eba4ede105d48b13ce5b4ca56bac284a92b5ccf
-
SHA256
b24b8ff1d7f131f30da67b165e44f5e1a31ccbf001e8e31c2fb5cfd09a5c629a
-
SHA512
e3f0c364fdd0b0e239a94f8ee1a5482ff65875d37c402904b316652a28b8add8138a4020c677f2616caab2988ed8b17862b320720d6439082acb83961f306294
Malware Config
Signatures
-
System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 1 IoCs
Adversaries may check for Internet connectivity on compromised systems.
pid Process 2072 cmd.exe -
Delays execution with timeout.exe 1 IoCs
pid Process 2928 timeout.exe -
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 2072 wrote to memory of 2928 2072 cmd.exe 31 PID 2072 wrote to memory of 2928 2072 cmd.exe 31 PID 2072 wrote to memory of 2928 2072 cmd.exe 31
Processes
-
C:\Windows\system32\cmd.execmd /c "C:\Users\Admin\AppData\Local\Temp\KASU PACK V.3\Ping Tweaker\KASU PING TWEAKER (RUN AS ADMIN).bat"1⤵
- System Network Configuration Discovery: Internet Connection Discovery
- Suspicious use of WriteProcessMemory
PID:2072 -
C:\Windows\system32\timeout.exetimeout /t 5 /nobreak2⤵
- Delays execution with timeout.exe
PID:2928
-