Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
10Static
static
ts.zip
windows7-x64
1ts.zip
windows10-2004-x64
1Install.exe
windows7-x64
10Install.exe
windows10-2004-x64
10advapi32res.dll
windows7-x64
1advapi32res.dll
windows10-2004-x64
1fonts/Alakob.ttf
windows7-x64
3fonts/Alakob.ttf
windows10-2004-x64
7fonts/Alas...ts.ttf
windows7-x64
3fonts/Alas...ts.ttf
windows10-2004-x64
7fonts/Arggotsc.ttf
windows7-x64
3fonts/Arggotsc.ttf
windows10-2004-x64
7fonts/Army...ed.ttf
windows7-x64
3fonts/Army...ed.ttf
windows10-2004-x64
7fonts/Army Thin.ttf
windows7-x64
3fonts/Army Thin.ttf
windows10-2004-x64
7fonts/BELL.ttf
windows7-x64
3fonts/BELL.ttf
windows10-2004-x64
7fonts/BELLB.ttf
windows7-x64
3fonts/BELLB.ttf
windows10-2004-x64
7fonts/BELLI.ttf
windows7-x64
3fonts/BELLI.ttf
windows10-2004-x64
7fonts/BOD_BI.ttf
windows7-x64
3fonts/BOD_BI.ttf
windows10-2004-x64
7fonts/BOD_BLAI.ttf
windows7-x64
3fonts/BOD_BLAI.ttf
windows10-2004-x64
7fonts/BOD_I.ttf
windows7-x64
3fonts/BOD_I.ttf
windows10-2004-x64
7fonts/CALISTB.ttf
windows7-x64
3fonts/CALISTB.ttf
windows10-2004-x64
7fonts/CALISTBI.ttf
windows7-x64
3fonts/CALISTBI.ttf
windows10-2004-x64
7Analysis
-
max time kernel
35s -
max time network
45s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
14/09/2022, 16:54
Static task
static1
Behavioral task
behavioral1
Sample
ts.zip
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ts.zip
Resource
win10v2004-20220901-en
Behavioral task
behavioral3
Sample
Install.exe
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
Install.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
advapi32res.dll
Resource
win7-20220812-en
Behavioral task
behavioral6
Sample
advapi32res.dll
Resource
win10v2004-20220901-en
Behavioral task
behavioral7
Sample
fonts/Alakob.ttf
Resource
win7-20220812-en
Behavioral task
behavioral8
Sample
fonts/Alakob.ttf
Resource
win10v2004-20220812-en
Behavioral task
behavioral9
Sample
fonts/AlaskanNights.ttf
Resource
win7-20220812-en
Behavioral task
behavioral10
Sample
fonts/AlaskanNights.ttf
Resource
win10v2004-20220901-en
Behavioral task
behavioral11
Sample
fonts/Arggotsc.ttf
Resource
win7-20220812-en
Behavioral task
behavioral12
Sample
fonts/Arggotsc.ttf
Resource
win10v2004-20220812-en
Behavioral task
behavioral13
Sample
fonts/Army Condensed.ttf
Resource
win7-20220901-en
Behavioral task
behavioral14
Sample
fonts/Army Condensed.ttf
Resource
win10v2004-20220812-en
Behavioral task
behavioral15
Sample
fonts/Army Thin.ttf
Resource
win7-20220812-en
Behavioral task
behavioral16
Sample
fonts/Army Thin.ttf
Resource
win10v2004-20220812-en
Behavioral task
behavioral17
Sample
fonts/BELL.ttf
Resource
win7-20220901-en
Behavioral task
behavioral18
Sample
fonts/BELL.ttf
Resource
win10v2004-20220812-en
Behavioral task
behavioral19
Sample
fonts/BELLB.ttf
Resource
win7-20220812-en
Behavioral task
behavioral20
Sample
fonts/BELLB.ttf
Resource
win10v2004-20220812-en
Behavioral task
behavioral21
Sample
fonts/BELLI.ttf
Resource
win7-20220901-en
Behavioral task
behavioral22
Sample
fonts/BELLI.ttf
Resource
win10v2004-20220812-en
Behavioral task
behavioral23
Sample
fonts/BOD_BI.ttf
Resource
win7-20220812-en
Behavioral task
behavioral24
Sample
fonts/BOD_BI.ttf
Resource
win10v2004-20220901-en
Behavioral task
behavioral25
Sample
fonts/BOD_BLAI.ttf
Resource
win7-20220812-en
Behavioral task
behavioral26
Sample
fonts/BOD_BLAI.ttf
Resource
win10v2004-20220812-en
Behavioral task
behavioral27
Sample
fonts/BOD_I.ttf
Resource
win7-20220812-en
Behavioral task
behavioral28
Sample
fonts/BOD_I.ttf
Resource
win10v2004-20220812-en
Behavioral task
behavioral29
Sample
fonts/CALISTB.ttf
Resource
win7-20220901-en
Behavioral task
behavioral30
Sample
fonts/CALISTB.ttf
Resource
win10v2004-20220812-en
Behavioral task
behavioral31
Sample
fonts/CALISTBI.ttf
Resource
win7-20220812-en
Behavioral task
behavioral32
Sample
fonts/CALISTBI.ttf
Resource
win10v2004-20220812-en
General
-
Target
fonts/Alakob.ttf
-
Size
80KB
-
MD5
5444bc745e7ed4c48fca3ec966348d83
-
SHA1
c207c04ac3c911bc9ab41527fb7f9bde38c34302
-
SHA256
2fbe2974774c313fada28762fa25641f7f58966632844496854f7386b9fb4fc3
-
SHA512
97fe730bf4e296347f44f35d8fb4327f9b65514bbf10ebb2ca34e334568f64e55245c0c84c2aa70c1db1cc5cf2232cba59048177e2b6f72a462ca3bd09c73199
-
SSDEEP
1536:PVpNLCyksGGnbex1Y73PYspairXb1Mrw3:PRLGvuj1b
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
-
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 1028 wrote to memory of 1340 1028 cmd.exe 28 PID 1028 wrote to memory of 1340 1028 cmd.exe 28 PID 1028 wrote to memory of 1340 1028 cmd.exe 28