Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
1343s -
max time network
1131s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-ja -
resource tags
-
submitted
14/08/2024, 05:47
General
-
Target
CyberDEV Client/lib/selenium/webdriver/remote/script_key.pyc
-
Size
1KB
-
MD5
288c6b352dee51939973a5e33999fe08
-
SHA1
700e55433a827af75b6530018cda35a00cb24f2d
-
SHA256
3758f9a4f71d89cd887725e8ab94c083f43e5414f06ce4398687c02a54004bd7
-
SHA512
227ef8113860720eabc8a53d9111f7c0ff6b4e427f8573a903e1f397fa352a2a1567d5a11e8935245f984f1d1cbfcb18380e7aa4b8c0b9cc41f68327170abe7e
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c "C:\Users\Admin\AppData\Local\Temp\CyberDEV Client\lib\selenium\webdriver\remote\script_key.pyc"1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx