Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240729-en
  • resource tags

    arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
  • submitted
    13/12/2024, 11:42

General

  • Target

    build/make.bat

  • Size

    311B

  • MD5

    8f99be542206ee7f0f36ae5b6526fccf

  • SHA1

    1ef960bd2ca21d125e488edee94812435a4d7d00

  • SHA256

    73efe6c0a0586ba00e39f2b5c54c4f50db59a18e3a9ae42af67961860fe666d4

  • SHA512

    84e25ec8e461776710a44a5a6d63435a318a67cad0eaf344b0fe77ba17b3f823540e29db0b3875d06321647d0cd47237971db8ba3e48d0535d7695643f2a5ce5

Score
6/10

Malware Config

Signatures

  • Enumerates connected drives 3 TTPs 1 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Suspicious use of WriteProcessMemory 12 IoCs

Processes

  • C:\Windows\system32\cmd.exe
    cmd /c "C:\Users\Admin\AppData\Local\Temp\build\make.bat"
    1⤵
    • Enumerates connected drives
    • Suspicious use of WriteProcessMemory
    PID:2124
    • C:\Windows\system32\cmd.exe
      C:\Windows\system32\cmd.exe /S /D /c" echo."
      2⤵
        PID:1820
      • C:\Windows\system32\cmd.exe
        C:\Windows\system32\cmd.exe /S /D /c" time"
        2⤵
          PID:1644
        • C:\Windows\system32\cmd.exe
          C:\Windows\system32\cmd.exe /S /D /c" echo."
          2⤵
            PID:1740
          • C:\Windows\system32\cmd.exe
            C:\Windows\system32\cmd.exe /S /D /c" time"
            2⤵
              PID:2384

          Network

          MITRE ATT&CK Enterprise v15

          Replay Monitor

          Loading Replay Monitor...

          Downloads