Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
19s -
max time network
17s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-es -
resource tags
-
submitted
21/08/2024, 22:25
General
-
Target
Fire-Editor-Awakening.jar
-
Size
15.4MB
-
MD5
134a6d900c78e7432767cb9c5bd3c09a
-
SHA1
0d7150540853c9e22fd3c66981a7d882ee7966f2
-
SHA256
46c46e45d2ccd2c2660cd01c0e8350b33f44c45241125b00bd6b78e0ba7a9142
-
SHA512
e68f90fe29a3bf774354f6e687dea8ef1bcbc4d86acc1080a6b099a0acfbb97cb6433bcdcca7871133f748da66bd99c1d75997c153921cb838c64bbd84859069
-
SSDEEP
393216:ONrH4fHtQIrs/qc8ze4lUjMKG6lW0F3ka5n/MfSn9i0KcGj:O5we7/q8R/+GVHGj
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 11 IoCs
-
Modifies registry class 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exejava -jar C:\Users\Admin\AppData\Local\Temp\Fire-Editor-Awakening.jar1⤵
-
C:\Windows\system32\mspaint.exe"C:\Windows\system32\mspaint.exe" "C:\Users\Admin\Desktop\OptimizeAssert.jfif" /ForceBootstrapPaint3D1⤵
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s DsSvc1⤵
- Drops file in System32 directory
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
2.4MB
-
Filesize
4KB
-
Filesize
2.4MB