Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    146s
  • max time network
    155s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    13/12/2024, 11:42

General

  • Target

    docs/release/build/make.bat

  • Size

    311B

  • MD5

    8f99be542206ee7f0f36ae5b6526fccf

  • SHA1

    1ef960bd2ca21d125e488edee94812435a4d7d00

  • SHA256

    73efe6c0a0586ba00e39f2b5c54c4f50db59a18e3a9ae42af67961860fe666d4

  • SHA512

    84e25ec8e461776710a44a5a6d63435a318a67cad0eaf344b0fe77ba17b3f823540e29db0b3875d06321647d0cd47237971db8ba3e48d0535d7695643f2a5ce5

Score
6/10

Malware Config

Signatures

  • Enumerates connected drives 3 TTPs 1 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Suspicious use of WriteProcessMemory 8 IoCs

Processes

  • C:\Windows\system32\cmd.exe
    C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\docs\release\build\make.bat"
    1⤵
    • Enumerates connected drives
    • Suspicious use of WriteProcessMemory
    PID:4124
    • C:\Windows\system32\cmd.exe
      C:\Windows\system32\cmd.exe /S /D /c" echo."
      2⤵
        PID:2416
      • C:\Windows\system32\cmd.exe
        C:\Windows\system32\cmd.exe /S /D /c" time"
        2⤵
          PID:1116
        • C:\Windows\system32\cmd.exe
          C:\Windows\system32\cmd.exe /S /D /c" echo."
          2⤵
            PID:892
          • C:\Windows\system32\cmd.exe
            C:\Windows\system32\cmd.exe /S /D /c" time"
            2⤵
              PID:4708

          Network

          MITRE ATT&CK Enterprise v15

          Replay Monitor

          Loading Replay Monitor...

          Downloads