Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    106s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    20/10/2024, 14:57

General

  • Target

    26b7b2be0ccfa6d1d01bd6fded59ca19ba9bf9acd5602ffb25ffdf7f37fb6d72N.exe

  • Size

    80KB

  • MD5

    36ffc99d00b52c1b2c73447e4526dc10

  • SHA1

    c9adf0f928b2eedd092408e1d230fbca774956f3

  • SHA256

    26b7b2be0ccfa6d1d01bd6fded59ca19ba9bf9acd5602ffb25ffdf7f37fb6d72

  • SHA512

    0ee5eb6c8606ac89193d071c4574b2d80f6b5a7eb84bc7989e8e2959ffdd68511e2e19c679d66b438d36719c5bb5b1e77bd81f5fc8531ed9a028dfbcb60c96ee

  • SSDEEP

    1536:QPvK/3zvzVJJicVLhilofsh3jzJxuOmb54vHTL+lf:Qi5ikFSof0zVmb5uHv+lf

Score
10/10

Malware Config

Signatures

  • BlackNET

    BlackNET is an open source remote access tool written in VB.NET.

  • Modifies Windows Defender Real-time Protection settings 3 TTPs 4 IoCs
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of WriteProcessMemory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\26b7b2be0ccfa6d1d01bd6fded59ca19ba9bf9acd5602ffb25ffdf7f37fb6d72N.exe
    "C:\Users\Admin\AppData\Local\Temp\26b7b2be0ccfa6d1d01bd6fded59ca19ba9bf9acd5602ffb25ffdf7f37fb6d72N.exe"
    1⤵
    • Modifies Windows Defender Real-time Protection settings
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:4780
    • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
      "powershell" Get-MpPreference -verbose
      2⤵
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      PID:1736

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_ayeusxr0.idp.ps1

    Filesize

    60B

    MD5

    d17fe0a3f47be24a6453e9ef58c94641

    SHA1

    6ab83620379fc69f80c0242105ddffd7d98d5d9d

    SHA256

    96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7

    SHA512

    5b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82

  • memory/1736-20-0x00007FFB72BF3000-0x00007FFB72BF5000-memory.dmp

    Filesize

    8KB

  • memory/1736-19-0x000002AFFF2A0000-0x000002AFFF2B0000-memory.dmp

    Filesize

    64KB

  • memory/1736-24-0x000002AFFF930000-0x000002AFFF952000-memory.dmp

    Filesize

    136KB

  • memory/4780-0-0x00007FFB76915000-0x00007FFB76916000-memory.dmp

    Filesize

    4KB

  • memory/4780-1-0x000000001B350000-0x000000001B3F6000-memory.dmp

    Filesize

    664KB

  • memory/4780-2-0x00007FFB76660000-0x00007FFB77001000-memory.dmp

    Filesize

    9.6MB

  • memory/4780-3-0x000000001B8F0000-0x000000001BDBE000-memory.dmp

    Filesize

    4.8MB

  • memory/4780-4-0x00007FFB76660000-0x00007FFB77001000-memory.dmp

    Filesize

    9.6MB

  • memory/4780-5-0x000000001BE70000-0x000000001BF0C000-memory.dmp

    Filesize

    624KB

  • memory/4780-6-0x0000000000C00000-0x0000000000C08000-memory.dmp

    Filesize

    32KB

  • memory/4780-7-0x000000001BFD0000-0x000000001C01C000-memory.dmp

    Filesize

    304KB

  • memory/4780-8-0x00007FFB76660000-0x00007FFB77001000-memory.dmp

    Filesize

    9.6MB

  • memory/4780-9-0x00007FFB76660000-0x00007FFB77001000-memory.dmp

    Filesize

    9.6MB

  • memory/4780-10-0x000000001D1D0000-0x000000001D232000-memory.dmp

    Filesize

    392KB

  • memory/4780-11-0x00007FFB76660000-0x00007FFB77001000-memory.dmp

    Filesize

    9.6MB

  • memory/4780-12-0x00007FFB76660000-0x00007FFB77001000-memory.dmp

    Filesize

    9.6MB

  • memory/4780-13-0x00007FFB76660000-0x00007FFB77001000-memory.dmp

    Filesize

    9.6MB

  • memory/4780-14-0x00007FFB76660000-0x00007FFB77001000-memory.dmp

    Filesize

    9.6MB

  • memory/4780-15-0x00007FFB76660000-0x00007FFB77001000-memory.dmp

    Filesize

    9.6MB

  • memory/4780-16-0x00007FFB76915000-0x00007FFB76916000-memory.dmp

    Filesize

    4KB

  • memory/4780-17-0x00007FFB76660000-0x00007FFB77001000-memory.dmp

    Filesize

    9.6MB

  • memory/4780-21-0x00007FFB76660000-0x00007FFB77001000-memory.dmp

    Filesize

    9.6MB

  • memory/4780-22-0x000000001FD20000-0x000000001FE20000-memory.dmp

    Filesize

    1024KB

  • memory/4780-23-0x00007FFB76660000-0x00007FFB77001000-memory.dmp

    Filesize

    9.6MB

  • memory/4780-18-0x00007FFB76660000-0x00007FFB77001000-memory.dmp

    Filesize

    9.6MB

  • memory/4780-25-0x000000001FD20000-0x000000001FE20000-memory.dmp

    Filesize

    1024KB

  • memory/4780-35-0x00007FFB76660000-0x00007FFB77001000-memory.dmp

    Filesize

    9.6MB

  • memory/4780-38-0x00007FFB76660000-0x00007FFB77001000-memory.dmp

    Filesize

    9.6MB

  • memory/4780-39-0x00007FFB76660000-0x00007FFB77001000-memory.dmp

    Filesize

    9.6MB

  • memory/4780-43-0x000000001FD20000-0x000000001FE20000-memory.dmp

    Filesize

    1024KB

  • memory/4780-42-0x000000001FD20000-0x000000001FE20000-memory.dmp

    Filesize

    1024KB

  • memory/4780-44-0x00007FFB76660000-0x00007FFB77001000-memory.dmp

    Filesize

    9.6MB

  • memory/4780-41-0x00007FFB76660000-0x00007FFB77001000-memory.dmp

    Filesize

    9.6MB

  • memory/4780-40-0x00007FFB76660000-0x00007FFB77001000-memory.dmp

    Filesize

    9.6MB

  • memory/4780-46-0x000000001FD20000-0x000000001FE20000-memory.dmp

    Filesize

    1024KB

  • memory/4780-45-0x00007FFB76660000-0x00007FFB77001000-memory.dmp

    Filesize

    9.6MB

  • memory/4780-47-0x0000000000A80000-0x0000000000A90000-memory.dmp

    Filesize

    64KB

  • memory/4780-48-0x000000001FD20000-0x000000001FE20000-memory.dmp

    Filesize

    1024KB

  • memory/4780-49-0x000000001FD20000-0x000000001FE20000-memory.dmp

    Filesize

    1024KB

  • memory/4780-50-0x000000001FD20000-0x000000001FE20000-memory.dmp

    Filesize

    1024KB

  • memory/4780-51-0x000000001FD20000-0x000000001FE20000-memory.dmp

    Filesize

    1024KB

  • memory/4780-52-0x000000001FD20000-0x000000001FE20000-memory.dmp

    Filesize

    1024KB

  • memory/4780-53-0x0000000000A80000-0x0000000000A90000-memory.dmp

    Filesize

    64KB

  • memory/4780-54-0x000000001FD20000-0x000000001FE20000-memory.dmp

    Filesize

    1024KB

  • memory/4780-57-0x000000001FD20000-0x000000001FE20000-memory.dmp

    Filesize

    1024KB

  • memory/4780-56-0x000000001FD20000-0x000000001FE20000-memory.dmp

    Filesize

    1024KB

  • memory/4780-55-0x000000001FD20000-0x000000001FE20000-memory.dmp

    Filesize

    1024KB

  • memory/4780-59-0x000000001FD20000-0x000000001FE20000-memory.dmp

    Filesize

    1024KB

  • memory/4780-58-0x000000001FD20000-0x000000001FE20000-memory.dmp

    Filesize

    1024KB

  • memory/4780-61-0x0000000000A80000-0x0000000000A90000-memory.dmp

    Filesize

    64KB

  • memory/4780-60-0x0000000000A80000-0x0000000000A90000-memory.dmp

    Filesize

    64KB

  • memory/4780-62-0x000000001FD20000-0x000000001FE20000-memory.dmp

    Filesize

    1024KB

  • memory/4780-63-0x000000001FD20000-0x000000001FE20000-memory.dmp

    Filesize

    1024KB

  • memory/4780-64-0x000000001FD20000-0x000000001FE20000-memory.dmp

    Filesize

    1024KB

  • memory/4780-66-0x000000001FD20000-0x000000001FE20000-memory.dmp

    Filesize

    1024KB

  • memory/4780-65-0x0000000000A80000-0x0000000000A90000-memory.dmp

    Filesize

    64KB

  • memory/4780-68-0x000000001FD20000-0x000000001FE20000-memory.dmp

    Filesize

    1024KB

  • memory/4780-67-0x000000001FD20000-0x000000001FE20000-memory.dmp

    Filesize

    1024KB

  • memory/4780-70-0x000000001FD20000-0x000000001FE20000-memory.dmp

    Filesize

    1024KB

  • memory/4780-69-0x000000001FD20000-0x000000001FE20000-memory.dmp

    Filesize

    1024KB

  • memory/4780-72-0x0000000000A80000-0x0000000000A90000-memory.dmp

    Filesize

    64KB

  • memory/4780-71-0x000000001FD20000-0x000000001FE20000-memory.dmp

    Filesize

    1024KB

  • memory/4780-73-0x0000000000A80000-0x0000000000A90000-memory.dmp

    Filesize

    64KB

  • memory/4780-74-0x000000001FD20000-0x000000001FE20000-memory.dmp

    Filesize

    1024KB

  • memory/4780-75-0x000000001FD20000-0x000000001FE20000-memory.dmp

    Filesize

    1024KB

  • memory/4780-76-0x000000001FD20000-0x000000001FE20000-memory.dmp

    Filesize

    1024KB

  • memory/4780-77-0x000000001FD20000-0x000000001FE20000-memory.dmp

    Filesize

    1024KB

  • memory/4780-78-0x0000000000A80000-0x0000000000A90000-memory.dmp

    Filesize

    64KB

  • memory/4780-79-0x000000001FD20000-0x000000001FE20000-memory.dmp

    Filesize

    1024KB

  • memory/4780-80-0x000000001FD20000-0x000000001FE20000-memory.dmp

    Filesize

    1024KB

  • memory/4780-82-0x000000001FD20000-0x000000001FE20000-memory.dmp

    Filesize

    1024KB

  • memory/4780-81-0x000000001FD20000-0x000000001FE20000-memory.dmp

    Filesize

    1024KB

  • memory/4780-84-0x0000000000A80000-0x0000000000A90000-memory.dmp

    Filesize

    64KB

  • memory/4780-83-0x0000000000A80000-0x0000000000A90000-memory.dmp

    Filesize

    64KB

  • memory/4780-85-0x000000001FD20000-0x000000001FE20000-memory.dmp

    Filesize

    1024KB

  • memory/4780-86-0x000000001FD20000-0x000000001FE20000-memory.dmp

    Filesize

    1024KB

  • memory/4780-87-0x000000001FD20000-0x000000001FE20000-memory.dmp

    Filesize

    1024KB

  • memory/4780-89-0x000000001FD20000-0x000000001FE20000-memory.dmp

    Filesize

    1024KB

  • memory/4780-88-0x000000001FD20000-0x000000001FE20000-memory.dmp

    Filesize

    1024KB

  • memory/4780-90-0x000000001FD20000-0x000000001FE20000-memory.dmp

    Filesize

    1024KB

  • memory/4780-91-0x000000001FD20000-0x000000001FE20000-memory.dmp

    Filesize

    1024KB

  • memory/4780-92-0x0000000000A80000-0x0000000000A90000-memory.dmp

    Filesize

    64KB

  • memory/4780-93-0x000000001FD20000-0x000000001FE20000-memory.dmp

    Filesize

    1024KB

  • memory/4780-94-0x000000001FD20000-0x000000001FE20000-memory.dmp

    Filesize

    1024KB

  • memory/4780-95-0x000000001FD20000-0x000000001FE20000-memory.dmp

    Filesize

    1024KB

  • memory/4780-96-0x0000000000A80000-0x0000000000A90000-memory.dmp

    Filesize

    64KB

  • memory/4780-97-0x000000001FD20000-0x000000001FE20000-memory.dmp

    Filesize

    1024KB

  • memory/4780-98-0x000000001FD20000-0x000000001FE20000-memory.dmp

    Filesize

    1024KB

  • memory/4780-99-0x000000001FD20000-0x000000001FE20000-memory.dmp

    Filesize

    1024KB