Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
132s -
max time network
136s -
platform
windows10-1703_x64 -
resource
win10-20240404-en -
resource tags
-
submitted
02/10/2024, 05:32
General
-
Target
$PLUGINSDIR/app-64.7z
-
Size
124.9MB
-
MD5
8323d339c17f7e6cd952e724db88ff91
-
SHA1
21539ecb01a473f3fd43ab15b15b16ff4662191e
-
SHA256
78ce5f5750a3757dfa1203940924dcf29958525ec99830de153f244b9cd4d1f8
-
SHA512
97253b4c345addc8d88feab5a4ddfd0663a5558b7a945921b83d3328f3cd331c9207b85cc115d0b2c29015c70dcc915775fdc52de3f4e37785121429eadff523
-
SSDEEP
3145728:WJkAzmogRUn/57SyAPgdg3ib33ohJH69WfKNZLZM+tpk5zRS:QkYjNR7SyANib33ovaNZLc5U
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\app-64.7z1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx