Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    13/12/2024, 11:42

General

  • Target

    docs/release/build/make.bat

  • Size

    311B

  • MD5

    8f99be542206ee7f0f36ae5b6526fccf

  • SHA1

    1ef960bd2ca21d125e488edee94812435a4d7d00

  • SHA256

    73efe6c0a0586ba00e39f2b5c54c4f50db59a18e3a9ae42af67961860fe666d4

  • SHA512

    84e25ec8e461776710a44a5a6d63435a318a67cad0eaf344b0fe77ba17b3f823540e29db0b3875d06321647d0cd47237971db8ba3e48d0535d7695643f2a5ce5

Score
6/10

Malware Config

Signatures

  • Enumerates connected drives 3 TTPs 1 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Suspicious use of WriteProcessMemory 12 IoCs

Processes

  • C:\Windows\system32\cmd.exe
    cmd /c "C:\Users\Admin\AppData\Local\Temp\docs\release\build\make.bat"
    1⤵
    • Enumerates connected drives
    • Suspicious use of WriteProcessMemory
    PID:1744
    • C:\Windows\system32\cmd.exe
      C:\Windows\system32\cmd.exe /S /D /c" echo."
      2⤵
        PID:2280
      • C:\Windows\system32\cmd.exe
        C:\Windows\system32\cmd.exe /S /D /c" time"
        2⤵
          PID:2452
        • C:\Windows\system32\cmd.exe
          C:\Windows\system32\cmd.exe /S /D /c" echo."
          2⤵
            PID:2020
          • C:\Windows\system32\cmd.exe
            C:\Windows\system32\cmd.exe /S /D /c" time"
            2⤵
              PID:2288

          Network

          MITRE ATT&CK Enterprise v15

          Replay Monitor

          Loading Replay Monitor...

          Downloads