Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
10Static
static
3New folder (5).rar
windows7-x64
3New folder (5).rar
windows10-2004-x64
3New folder...es.iso
windows7-x64
3New folder...es.iso
windows10-2004-x64
3New folder...ty.iso
windows7-x64
3New folder...ty.iso
windows10-2004-x64
3New folder...FO.txt
windows7-x64
1New folder...FO.txt
windows10-2004-x64
1New folder...s.json
windows7-x64
3New folder...s.json
windows10-2004-x64
3New folder...ect.js
windows7-x64
3New folder...ect.js
windows10-2004-x64
3New folder...DS.cdn
windows7-x64
3New folder...DS.cdn
windows10-2004-x64
3New folder...gR.dll
windows7-x64
1New folder...gR.dll
windows10-2004-x64
1New folder...NT.txt
windows7-x64
1New folder...NT.txt
windows10-2004-x64
1New folder...er.exe
windows7-x64
7New folder...er.exe
windows10-2004-x64
10Stub.pyc
windows7-x64
3Stub.pyc
windows10-2004-x64
3Analysis
-
max time kernel
117s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
06/09/2024, 07:24
Behavioral task
behavioral1
Sample
New folder (5).rar
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
New folder (5).rar
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
New folder (5)/GUI/Frames.iso
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
New folder (5)/GUI/Frames.iso
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
New folder (5)/GUI/Quality.iso
Resource
win7-20240704-en
Behavioral task
behavioral6
Sample
New folder (5)/GUI/Quality.iso
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
New folder (5)/INFO.txt
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
New folder (5)/INFO.txt
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
New folder (5)/Loader/Frames.json
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
New folder (5)/Loader/Frames.json
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
New folder (5)/Loader/Gui Connect.js
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
New folder (5)/Loader/Gui Connect.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
New folder (5)/Loader/key_format/KeyBINDS.cdn
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
New folder (5)/Loader/key_format/KeyBINDS.cdn
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
New folder (5)/QllzgR.dll
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
New folder (5)/QllzgR.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
New folder (5)/READ ME!!/DEVELOPMENT.txt
Resource
win7-20240903-en
Behavioral task
behavioral18
Sample
New folder (5)/READ ME!!/DEVELOPMENT.txt
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
New folder (5)/Skin Changer.exe
Resource
win7-20240903-en
Behavioral task
behavioral20
Sample
New folder (5)/Skin Changer.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
Stub.pyc
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
Stub.pyc
Resource
win10v2004-20240802-en
General
-
Target
New folder (5)/GUI/Frames.iso
-
Size
820B
-
MD5
66d261cd29d603d80d19c4164f983fe5
-
SHA1
f448bcc7e20bde8c3cb7fff297cc8072090a1de9
-
SHA256
507e7a4fa00e7b3d1fc6e56b30f7bd6f16422f0d57b8f07eba29fb8d7f6e5a57
-
SHA512
cb262330d1be5400f607dcc96ea866d2dbfa5831a3b68e6837ea7ef83908587872f0337087882492cc6d41b50ddc759d1445ae4f1c21ed35d9ff9cb75b1c6bc4
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 2916 wrote to memory of 2716 2916 cmd.exe 31 PID 2916 wrote to memory of 2716 2916 cmd.exe 31 PID 2916 wrote to memory of 2716 2916 cmd.exe 31
Processes
-
C:\Windows\system32\cmd.execmd /c "C:\Users\Admin\AppData\Local\Temp\New folder (5)\GUI\Frames.iso"1⤵
- Suspicious use of WriteProcessMemory
PID:2916 -
C:\Windows\System32\isoburn.exe"C:\Windows\System32\isoburn.exe" "C:\Users\Admin\AppData\Local\Temp\New folder (5)\GUI\Frames.iso"2⤵PID:2716
-