Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    61s
  • max time network
    67s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19/08/2024, 11:58

General

  • Target

    turbowarp-packager-extras/turbowarp-packager-extras.exe

  • Size

    3.3MB

  • MD5

    9541cfc31e032739b9779e45dc8c10e6

  • SHA1

    41f9b27726cafa351c686a2e0483a76917bf2950

  • SHA256

    253b444a2e174408325cf332a55783f70aca79fb76f2c0c7dad49f77da290efd

  • SHA512

    be9f0d3bfe8ff4262dd37fc6db1db44f46a9afd9095d45ed78e42a2fc8ebcb4fdd409c5118de919814ad56df20e493649dd74645ee0c8aa9e7077617ed1ca004

  • SSDEEP

    98304:chJkBxDESkhQKhOC9+s2m8vYSLiNEqapl:chJiDEPhl4o+8m

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\turbowarp-packager-extras\turbowarp-packager-extras.exe
    "C:\Users\Admin\AppData\Local\Temp\turbowarp-packager-extras\turbowarp-packager-extras.exe"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1264

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1264-0-0x00007FFA7A810000-0x00007FFA7AA73000-memory.dmp

    Filesize

    2.4MB

  • memory/1264-1-0x00007FFA79850000-0x00007FFA79D40000-memory.dmp

    Filesize

    4.9MB

  • memory/1264-2-0x00007FFA78C40000-0x00007FFA79181000-memory.dmp

    Filesize

    5.3MB

  • memory/1264-3-0x00007FFA789D0000-0x00007FFA78C35000-memory.dmp

    Filesize

    2.4MB

  • memory/1264-4-0x000001821C130000-0x000001821C140000-memory.dmp

    Filesize

    64KB