Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
148s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
04/10/2024, 01:47
General
-
Target
VFS/ProgramFilesX64/AIMP/AIMP.exe
-
Size
5.8MB
-
MD5
eb0eb5dc3234d7f0bb64b7ed5bbc7673
-
SHA1
2190d5f1a09100557e9112d5720bf7c59231f20a
-
SHA256
4a0e5ff986b8355155b3efac9935c988f3c1ee5768869d731e832124a52aa8e2
-
SHA512
da15ae5c078aa25658179331eb8e83b1f361d101c84039d3e99db5e7ea9b9a455493d96d0a6fbc6cdcdf239d69d9366592b4341f424927faf0088d0dc0c28c36
-
SSDEEP
49152:9Ngn7bu88oQ6BLXVXOmCzM3mwIqYTk/Co4Qaqp8Spdkck:9N+O6Btp1Co4UpFGck
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 1 IoCs
Looks up country code configured in the registry, likely geofence.
-
Enumerates connected drives 3 TTPs 1 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of FindShellTrayWindow 10 IoCs
-
Suspicious use of SendNotifyMessage 7 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\VFS\ProgramFilesX64\AIMP\AIMP.exe"C:\Users\Admin\AppData\Local\Temp\VFS\ProgramFilesX64\AIMP\AIMP.exe"1⤵
- Checks computer location settings
- Enumerates connected drives
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
152B
MD56e14ce478b0e98b63e0ca77f34a3d4c9
SHA156244e868f209f01f87f89f7cf2c0f44d468c73b
SHA2565976ae39ff3e1f9da2c915a1174deb6fc9678f92213055b0785ea096c8a65353
SHA51276c6f0e5101cd1280ba6c99e55f5b77b2e79502b5209d6b62f93d3fde59d3c8d3c8828f5e9709ae43cb975f029796ad539e36ddc820fa400bb089c968c6d04fa
-
Filesize
132KB
-
Filesize
28KB
-
Filesize
360KB
-
Filesize
28KB
-
Filesize
12KB
-
Filesize
64KB
-
Filesize
376KB
-
Filesize
376KB
-
Filesize
1.6MB
-
Filesize
12KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
132KB
-
Filesize
64KB
-
Filesize
4.3MB
-
Filesize
3.6MB
-
Filesize
156KB
-
Filesize
12.9MB
-
Filesize
140KB
-
Filesize
5.8MB
-
Filesize
376KB
-
Filesize
12.9MB