Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
1356s -
max time network
1150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-ja -
resource tags
-
submitted
14/08/2024, 05:47
General
-
Target
CyberDEV Client/lib/selenium/webdriver/remote/mobile.pyc
-
Size
3KB
-
MD5
910d8cba2873be53dc7b9be0794237ab
-
SHA1
9241a55557d36eaf2479a64d689ba0c8d1403357
-
SHA256
90d57e8cbe54c0e4ad3382ad8ebeb79e5c25b1aec7bdf385fcf11839eaf3e08b
-
SHA512
2423a26f24aa7d37aaba2e6cb6d8913161b6b130f9f67d19d740f98c248a5c08c45e13721fbafc289cb82dbb698b921fae8903db571694bc60094f219e15790d
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c "C:\Users\Admin\AppData\Local\Temp\CyberDEV Client\lib\selenium\webdriver\remote\mobile.pyc"1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx