Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

01/10/2024, 17:29

241001-v2k63svhje 5

01/10/2024, 17:24

241001-vysfzsvfrb 5

Analysis

  • max time kernel
    135s
  • max time network
    129s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240910-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240910-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01/10/2024, 17:29

General

  • Target

    ASUNTO_ Llamado urgente rendir indagatoria carácter obligatorio Bogotá 1 de octubre de 2024.eml

  • Size

    26KB

  • MD5

    111ffc70a68c44d0eab4f6b43ffd5deb

  • SHA1

    92c003d4048c8e8f3d172ed6a0e1a3072aeffa1c

  • SHA256

    40cd4147a3597ce1a5f2fccad4f18ea72e671a1a210cf5fe98ba881b096a8714

  • SHA512

    153be97865f32a385dcad835299621b7baaa4505b793b57ef0532025945a6e634a69caf47434df75cad6860e0efd19f6d8dfc96e0adaf33a81aad0c51af3d2fc

  • SSDEEP

    384:Xu9WKORngehvSfH1oItLZPnY1LENIYYHXQ/Ue8flDUh:+9WKengyvs8e+YYHX3e8Oh

Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Modifies registry class 2 IoCs
  • NTFS ADS 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Windows\system32\cmd.exe
    cmd /c "C:\Users\Admin\AppData\Local\Temp\ASUNTO_ Llamado urgente rendir indagatoria carácter obligatorio Bogotá 1 de octubre de 2024.eml"
    1⤵
    • Modifies registry class
    • NTFS ADS
    PID:1548
  • C:\Windows\system32\OpenWith.exe
    C:\Windows\system32\OpenWith.exe -Embedding
    1⤵
    • Modifies registry class
    • Suspicious use of SetWindowsHookEx
    PID:4276

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads