Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

Проги...а.rar

windows7-x64

3

Проги...а.rar

windows10-2004-x64

3

Проги...).tmpl

windows7-x64

3

Проги...).tmpl

windows10-2004-x64

3

Проги...t.tmpl

windows7-x64

3

Проги...t.tmpl

windows10-2004-x64

3

Проги...TALLER

windows7-x64

1

Проги...TALLER

windows10-2004-x64

1

Проги...SE.txt

windows7-x64

1

Проги...SE.txt

windows10-2004-x64

1

Проги...TADATA

windows7-x64

1

Проги...TADATA

windows10-2004-x64

1

Проги...RECORD

windows7-x64

1

Проги...RECORD

windows10-2004-x64

1

Проги....typed

windows7-x64

3

Проги....typed

windows10-2004-x64

3

Проги...TALLER

windows7-x64

1

Проги...TALLER

windows10-2004-x64

1

Проги...SE.txt

windows7-x64

1

Проги...SE.txt

windows10-2004-x64

1

Проги...TADATA

windows7-x64

1

Проги...TADATA

windows10-2004-x64

1

Проги...RECORD

windows7-x64

1

Проги...RECORD

windows10-2004-x64

1

Проги.../WHEEL

windows7-x64

1

Проги.../WHEEL

windows10-2004-x64

1

Проги...ts.txt

windows7-x64

1

Проги...ts.txt

windows10-2004-x64

1

Проги...or.txt

windows7-x64

1

Проги...or.txt

windows10-2004-x64

1

Проги...e.spec

windows7-x64

3

Проги...e.spec

windows10-2004-x64

3

Analysis

  • max time kernel
    146s
  • max time network
    155s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    08/10/2024, 14:41

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Проги с ролика/Blank-Grabber-main/Blank Grabber/env/Lib/site-packages/setuptools/script (dev).tmpl

  • Size

    218B

  • MD5

    762d226e24c456568a2f4305151094be

  • SHA1

    982302a6a5664f02c8cc87407dc7f2f5b5fbd825

  • SHA256

    454cd0cc2414697b7074bb581d661b21098e6844b906baaad45bd403fb6efb92

  • SHA512

    ab81baf791aafba3391dfc0ebd32a87ec4820e044bc5cf53fad7d27dabfa87d4979f76164ef017b3f5fd3daee544bf724b67d01e0ef8b72b6fa3223e5f23dd48

Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Modifies registry class 2 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Windows\system32\cmd.exe
    cmd /c "C:\Users\Admin\AppData\Local\Temp\Проги с ролика\Blank-Grabber-main\Blank Grabber\env\Lib\site-packages\setuptools\script (dev).tmpl"
    1⤵
    • Modifies registry class
    PID:3572
  • C:\Windows\system32\OpenWith.exe
    C:\Windows\system32\OpenWith.exe -Embedding
    1⤵
    • Modifies registry class
    • Suspicious use of SetWindowsHookEx
    PID:2424

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads