Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    117s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    19/10/2024, 01:26

General

  • Target

    9ddb57dbaa9ec550fabc594a17740fbf3da778e781080fa2022d9f98bf0f4a33N.exe

  • Size

    80KB

  • MD5

    21ed8f7089aa6636b4ed176347b05890

  • SHA1

    f493a7f0db1d499b54842ba47852b7c6006b4d83

  • SHA256

    9ddb57dbaa9ec550fabc594a17740fbf3da778e781080fa2022d9f98bf0f4a33

  • SHA512

    e4184e9b54f62056b51c551b5b5fec7c0f4e4a5ff5fa410344fbf172e4b9d80506a16b9e609b280f81183c4f08ab7650dc2f778fe4e2e3a21cd1997301b4135d

  • SSDEEP

    1536:QPvK/3zvzVJJicVLhilofshajzJxuOmb54vHTL+lf:Qi5ikFSofPzVmb5uHv+lf

Score
10/10

Malware Config

Signatures

  • BlackNET

    BlackNET is an open source remote access tool written in VB.NET.

  • Modifies Windows Defender Real-time Protection settings 3 TTPs 4 IoCs
  • Windows security modification 2 TTPs 1 IoCs
  • Modifies system certificate store 2 TTPs 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\9ddb57dbaa9ec550fabc594a17740fbf3da778e781080fa2022d9f98bf0f4a33N.exe
    "C:\Users\Admin\AppData\Local\Temp\9ddb57dbaa9ec550fabc594a17740fbf3da778e781080fa2022d9f98bf0f4a33N.exe"
    1⤵
    • Modifies Windows Defender Real-time Protection settings
    • Windows security modification
    • Modifies system certificate store
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:2644
    • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
      "powershell" Get-MpPreference -verbose
      2⤵
      • Suspicious use of AdjustPrivilegeToken
      PID:2680

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2644-70-0x000007FEF4F10000-0x000007FEF58AD000-memory.dmp

    Filesize

    9.6MB

  • memory/2644-71-0x000007FEF4F10000-0x000007FEF58AD000-memory.dmp

    Filesize

    9.6MB

  • memory/2644-2-0x000007FEF4F10000-0x000007FEF58AD000-memory.dmp

    Filesize

    9.6MB

  • memory/2644-3-0x000007FEF4F10000-0x000007FEF58AD000-memory.dmp

    Filesize

    9.6MB

  • memory/2644-4-0x000007FEF4F10000-0x000007FEF58AD000-memory.dmp

    Filesize

    9.6MB

  • memory/2644-5-0x000007FEF4F10000-0x000007FEF58AD000-memory.dmp

    Filesize

    9.6MB

  • memory/2644-6-0x000007FEF4F10000-0x000007FEF58AD000-memory.dmp

    Filesize

    9.6MB

  • memory/2644-10-0x000007FEF4F10000-0x000007FEF58AD000-memory.dmp

    Filesize

    9.6MB

  • memory/2644-9-0x000007FEF4F10000-0x000007FEF58AD000-memory.dmp

    Filesize

    9.6MB

  • memory/2644-8-0x000007FEF4F10000-0x000007FEF58AD000-memory.dmp

    Filesize

    9.6MB

  • memory/2644-84-0x000007FEF4F10000-0x000007FEF58AD000-memory.dmp

    Filesize

    9.6MB

  • memory/2644-83-0x000007FEF4F10000-0x000007FEF58AD000-memory.dmp

    Filesize

    9.6MB

  • memory/2644-18-0x000007FEF4F10000-0x000007FEF58AD000-memory.dmp

    Filesize

    9.6MB

  • memory/2644-17-0x000007FEF4F10000-0x000007FEF58AD000-memory.dmp

    Filesize

    9.6MB

  • memory/2644-12-0x000007FEF4F10000-0x000007FEF58AD000-memory.dmp

    Filesize

    9.6MB

  • memory/2644-11-0x000007FEF4F10000-0x000007FEF58AD000-memory.dmp

    Filesize

    9.6MB

  • memory/2644-21-0x000007FEF4F10000-0x000007FEF58AD000-memory.dmp

    Filesize

    9.6MB

  • memory/2644-7-0x000007FEF4F10000-0x000007FEF58AD000-memory.dmp

    Filesize

    9.6MB

  • memory/2644-22-0x000007FEF4F10000-0x000007FEF58AD000-memory.dmp

    Filesize

    9.6MB

  • memory/2644-23-0x000007FEF4F10000-0x000007FEF58AD000-memory.dmp

    Filesize

    9.6MB

  • memory/2644-78-0x000007FEF4F10000-0x000007FEF58AD000-memory.dmp

    Filesize

    9.6MB

  • memory/2644-80-0x000007FEF4F10000-0x000007FEF58AD000-memory.dmp

    Filesize

    9.6MB

  • memory/2644-24-0x000007FEF4F10000-0x000007FEF58AD000-memory.dmp

    Filesize

    9.6MB

  • memory/2644-27-0x000007FEF4F10000-0x000007FEF58AD000-memory.dmp

    Filesize

    9.6MB

  • memory/2644-29-0x000007FEF4F10000-0x000007FEF58AD000-memory.dmp

    Filesize

    9.6MB

  • memory/2644-28-0x000007FEF4F10000-0x000007FEF58AD000-memory.dmp

    Filesize

    9.6MB

  • memory/2644-30-0x000007FEF4F10000-0x000007FEF58AD000-memory.dmp

    Filesize

    9.6MB

  • memory/2644-31-0x000007FEF4F10000-0x000007FEF58AD000-memory.dmp

    Filesize

    9.6MB

  • memory/2644-32-0x000007FEF4F10000-0x000007FEF58AD000-memory.dmp

    Filesize

    9.6MB

  • memory/2644-33-0x000007FEF4F10000-0x000007FEF58AD000-memory.dmp

    Filesize

    9.6MB

  • memory/2644-34-0x000007FEF4F10000-0x000007FEF58AD000-memory.dmp

    Filesize

    9.6MB

  • memory/2644-35-0x000007FEF4F10000-0x000007FEF58AD000-memory.dmp

    Filesize

    9.6MB

  • memory/2644-36-0x000007FEF4F10000-0x000007FEF58AD000-memory.dmp

    Filesize

    9.6MB

  • memory/2644-37-0x000007FEF4F10000-0x000007FEF58AD000-memory.dmp

    Filesize

    9.6MB

  • memory/2644-38-0x000007FEF4F10000-0x000007FEF58AD000-memory.dmp

    Filesize

    9.6MB

  • memory/2644-39-0x000007FEF4F10000-0x000007FEF58AD000-memory.dmp

    Filesize

    9.6MB

  • memory/2644-40-0x000007FEF4F10000-0x000007FEF58AD000-memory.dmp

    Filesize

    9.6MB

  • memory/2644-41-0x000007FEF4F10000-0x000007FEF58AD000-memory.dmp

    Filesize

    9.6MB

  • memory/2644-42-0x000007FEF4F10000-0x000007FEF58AD000-memory.dmp

    Filesize

    9.6MB

  • memory/2644-44-0x000007FEF4F10000-0x000007FEF58AD000-memory.dmp

    Filesize

    9.6MB

  • memory/2644-1-0x000007FEF4F10000-0x000007FEF58AD000-memory.dmp

    Filesize

    9.6MB

  • memory/2644-43-0x000007FEF4F10000-0x000007FEF58AD000-memory.dmp

    Filesize

    9.6MB

  • memory/2644-45-0x000007FEF4F10000-0x000007FEF58AD000-memory.dmp

    Filesize

    9.6MB

  • memory/2644-47-0x000007FEF4F10000-0x000007FEF58AD000-memory.dmp

    Filesize

    9.6MB

  • memory/2644-48-0x000007FEF51CE000-0x000007FEF51CF000-memory.dmp

    Filesize

    4KB

  • memory/2644-49-0x000007FEF4F10000-0x000007FEF58AD000-memory.dmp

    Filesize

    9.6MB

  • memory/2644-51-0x000007FEF4F10000-0x000007FEF58AD000-memory.dmp

    Filesize

    9.6MB

  • memory/2644-52-0x000007FEF4F10000-0x000007FEF58AD000-memory.dmp

    Filesize

    9.6MB

  • memory/2644-50-0x000007FEF4F10000-0x000007FEF58AD000-memory.dmp

    Filesize

    9.6MB

  • memory/2644-55-0x000007FEF4F10000-0x000007FEF58AD000-memory.dmp

    Filesize

    9.6MB

  • memory/2644-57-0x000007FEF4F10000-0x000007FEF58AD000-memory.dmp

    Filesize

    9.6MB

  • memory/2644-58-0x000007FEF4F10000-0x000007FEF58AD000-memory.dmp

    Filesize

    9.6MB

  • memory/2644-56-0x000007FEF4F10000-0x000007FEF58AD000-memory.dmp

    Filesize

    9.6MB

  • memory/2644-54-0x000007FEF4F10000-0x000007FEF58AD000-memory.dmp

    Filesize

    9.6MB

  • memory/2644-53-0x000007FEF4F10000-0x000007FEF58AD000-memory.dmp

    Filesize

    9.6MB

  • memory/2644-59-0x000007FEF4F10000-0x000007FEF58AD000-memory.dmp

    Filesize

    9.6MB

  • memory/2644-61-0x000007FEF4F10000-0x000007FEF58AD000-memory.dmp

    Filesize

    9.6MB

  • memory/2644-63-0x000007FEF4F10000-0x000007FEF58AD000-memory.dmp

    Filesize

    9.6MB

  • memory/2644-65-0x000007FEF4F10000-0x000007FEF58AD000-memory.dmp

    Filesize

    9.6MB

  • memory/2644-68-0x000007FEF4F10000-0x000007FEF58AD000-memory.dmp

    Filesize

    9.6MB

  • memory/2644-0-0x000007FEF51CE000-0x000007FEF51CF000-memory.dmp

    Filesize

    4KB

  • memory/2644-46-0x000007FEF4F10000-0x000007FEF58AD000-memory.dmp

    Filesize

    9.6MB

  • memory/2644-73-0x000007FEF4F10000-0x000007FEF58AD000-memory.dmp

    Filesize

    9.6MB

  • memory/2644-74-0x000007FEF4F10000-0x000007FEF58AD000-memory.dmp

    Filesize

    9.6MB

  • memory/2644-72-0x000007FEF4F10000-0x000007FEF58AD000-memory.dmp

    Filesize

    9.6MB

  • memory/2644-69-0x000007FEF4F10000-0x000007FEF58AD000-memory.dmp

    Filesize

    9.6MB

  • memory/2644-67-0x000007FEF4F10000-0x000007FEF58AD000-memory.dmp

    Filesize

    9.6MB

  • memory/2644-66-0x000007FEF4F10000-0x000007FEF58AD000-memory.dmp

    Filesize

    9.6MB

  • memory/2644-64-0x000007FEF4F10000-0x000007FEF58AD000-memory.dmp

    Filesize

    9.6MB

  • memory/2644-62-0x000007FEF4F10000-0x000007FEF58AD000-memory.dmp

    Filesize

    9.6MB

  • memory/2644-60-0x000007FEF4F10000-0x000007FEF58AD000-memory.dmp

    Filesize

    9.6MB

  • memory/2644-76-0x000007FEF4F10000-0x000007FEF58AD000-memory.dmp

    Filesize

    9.6MB

  • memory/2644-75-0x000007FEF4F10000-0x000007FEF58AD000-memory.dmp

    Filesize

    9.6MB

  • memory/2644-77-0x000007FEF4F10000-0x000007FEF58AD000-memory.dmp

    Filesize

    9.6MB

  • memory/2644-81-0x000007FEF4F10000-0x000007FEF58AD000-memory.dmp

    Filesize

    9.6MB

  • memory/2644-79-0x000007FEF4F10000-0x000007FEF58AD000-memory.dmp

    Filesize

    9.6MB

  • memory/2644-82-0x000007FEF4F10000-0x000007FEF58AD000-memory.dmp

    Filesize

    9.6MB

  • memory/2680-25-0x0000000002BD4000-0x0000000002BD7000-memory.dmp

    Filesize

    12KB

  • memory/2680-26-0x0000000002BDB000-0x0000000002C42000-memory.dmp

    Filesize

    412KB

  • memory/2680-19-0x000000001B650000-0x000000001B932000-memory.dmp

    Filesize

    2.9MB

  • memory/2680-20-0x0000000002280000-0x0000000002288000-memory.dmp

    Filesize

    32KB