Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    150s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    10/10/2024, 14:23

General

  • Target

    V1.5.6 + V1.5.8/SecHex-Spoofy V1.5.6/SecHex-GUI.pdb

  • Size

    32KB

  • MD5

    d2f1182da0077f1e60e33f1efa03584a

  • SHA1

    af832c5fe748ff688a03823bf47ed5902fbe4236

  • SHA256

    593169a5292387ff27c5c5de33db0fa1eaf65290fd52c6ff93d49233e7ebdebc

  • SHA512

    b88d30fa31a885e5b1cec1306ec446d85f2be689f7e043d4e85ea98c4cbec052558aa1555576a640fc49d890763732a7306ff492a788439d5792ebf566e43c1b

  • SSDEEP

    384:bOxouqQ9n3YucMaWQbuKaasvSlKzGIEoDL0EhM7bjeArX9komVAQHHfisbHtixhV:CxvqG3D+2LQeEatahvH45wF3e4Mjl2

Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Modifies registry class 2 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Windows\system32\cmd.exe
    cmd /c "C:\Users\Admin\AppData\Local\Temp\V1.5.6 + V1.5.8\SecHex-Spoofy V1.5.6\SecHex-GUI.pdb"
    1⤵
    • Modifies registry class
    PID:3876
  • C:\Windows\system32\OpenWith.exe
    C:\Windows\system32\OpenWith.exe -Embedding
    1⤵
    • Modifies registry class
    • Suspicious use of SetWindowsHookEx
    PID:2384

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads