Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    91s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    07/09/2024, 14:31

General

  • Target

    locales/ca.pak

  • Size

    101KB

  • MD5

    5722ad401412745df990eb664554a916

  • SHA1

    1a2d3a778182c38ef0763866b23e1395689b8e40

  • SHA256

    93f1feadeb46fc05aa43d8f1b0368e5c57a3eec334187a96a730d7958c6fa9cd

  • SHA512

    33ff128b6477da4249db01fcf932c4c0fb4de9ae25d9644a79736e44013d3ae8b20553794ad20be910a6e51077e49301861c9a6de46b78e4cdbfbb4e897f25bc

  • SSDEEP

    3072:5BPsDbcgrI540ZL8lK+O5ajagEScU5hh8XK710bzRh4Rp9nAkpxlCFtdRP3BCill:5WbcgxO5aFEScU5hh8XK50naDnAkpxlu

Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Modifies registry class 2 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Windows\system32\cmd.exe
    cmd /c C:\Users\Admin\AppData\Local\Temp\locales\ca.pak
    1⤵
    • Modifies registry class
    PID:5072
  • C:\Windows\system32\OpenWith.exe
    C:\Windows\system32\OpenWith.exe -Embedding
    1⤵
    • Modifies registry class
    • Suspicious use of SetWindowsHookEx
    PID:3680

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads