Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
10Static
static
ts.zip
windows7-x64
1ts.zip
windows10-2004-x64
1Install.exe
windows7-x64
10Install.exe
windows10-2004-x64
10advapi32res.dll
windows7-x64
1advapi32res.dll
windows10-2004-x64
1fonts/Alakob.ttf
windows7-x64
3fonts/Alakob.ttf
windows10-2004-x64
7fonts/Alas...ts.ttf
windows7-x64
3fonts/Alas...ts.ttf
windows10-2004-x64
7fonts/Arggotsc.ttf
windows7-x64
3fonts/Arggotsc.ttf
windows10-2004-x64
7fonts/Army...ed.ttf
windows7-x64
3fonts/Army...ed.ttf
windows10-2004-x64
7fonts/Army Thin.ttf
windows7-x64
3fonts/Army Thin.ttf
windows10-2004-x64
7fonts/BELL.ttf
windows7-x64
3fonts/BELL.ttf
windows10-2004-x64
7fonts/BELLB.ttf
windows7-x64
3fonts/BELLB.ttf
windows10-2004-x64
7fonts/BELLI.ttf
windows7-x64
3fonts/BELLI.ttf
windows10-2004-x64
7fonts/BOD_BI.ttf
windows7-x64
3fonts/BOD_BI.ttf
windows10-2004-x64
7fonts/BOD_BLAI.ttf
windows7-x64
3fonts/BOD_BLAI.ttf
windows10-2004-x64
7fonts/BOD_I.ttf
windows7-x64
3fonts/BOD_I.ttf
windows10-2004-x64
7fonts/CALISTB.ttf
windows7-x64
3fonts/CALISTB.ttf
windows10-2004-x64
7fonts/CALISTBI.ttf
windows7-x64
3fonts/CALISTBI.ttf
windows10-2004-x64
7Analysis
-
max time kernel
5s -
max time network
46s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
14/09/2022, 16:54
Static task
static1
Behavioral task
behavioral1
Sample
ts.zip
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ts.zip
Resource
win10v2004-20220901-en
Behavioral task
behavioral3
Sample
Install.exe
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
Install.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
advapi32res.dll
Resource
win7-20220812-en
Behavioral task
behavioral6
Sample
advapi32res.dll
Resource
win10v2004-20220901-en
Behavioral task
behavioral7
Sample
fonts/Alakob.ttf
Resource
win7-20220812-en
Behavioral task
behavioral8
Sample
fonts/Alakob.ttf
Resource
win10v2004-20220812-en
Behavioral task
behavioral9
Sample
fonts/AlaskanNights.ttf
Resource
win7-20220812-en
Behavioral task
behavioral10
Sample
fonts/AlaskanNights.ttf
Resource
win10v2004-20220901-en
Behavioral task
behavioral11
Sample
fonts/Arggotsc.ttf
Resource
win7-20220812-en
Behavioral task
behavioral12
Sample
fonts/Arggotsc.ttf
Resource
win10v2004-20220812-en
Behavioral task
behavioral13
Sample
fonts/Army Condensed.ttf
Resource
win7-20220901-en
Behavioral task
behavioral14
Sample
fonts/Army Condensed.ttf
Resource
win10v2004-20220812-en
Behavioral task
behavioral15
Sample
fonts/Army Thin.ttf
Resource
win7-20220812-en
Behavioral task
behavioral16
Sample
fonts/Army Thin.ttf
Resource
win10v2004-20220812-en
Behavioral task
behavioral17
Sample
fonts/BELL.ttf
Resource
win7-20220901-en
Behavioral task
behavioral18
Sample
fonts/BELL.ttf
Resource
win10v2004-20220812-en
Behavioral task
behavioral19
Sample
fonts/BELLB.ttf
Resource
win7-20220812-en
Behavioral task
behavioral20
Sample
fonts/BELLB.ttf
Resource
win10v2004-20220812-en
Behavioral task
behavioral21
Sample
fonts/BELLI.ttf
Resource
win7-20220901-en
Behavioral task
behavioral22
Sample
fonts/BELLI.ttf
Resource
win10v2004-20220812-en
Behavioral task
behavioral23
Sample
fonts/BOD_BI.ttf
Resource
win7-20220812-en
Behavioral task
behavioral24
Sample
fonts/BOD_BI.ttf
Resource
win10v2004-20220901-en
Behavioral task
behavioral25
Sample
fonts/BOD_BLAI.ttf
Resource
win7-20220812-en
Behavioral task
behavioral26
Sample
fonts/BOD_BLAI.ttf
Resource
win10v2004-20220812-en
Behavioral task
behavioral27
Sample
fonts/BOD_I.ttf
Resource
win7-20220812-en
Behavioral task
behavioral28
Sample
fonts/BOD_I.ttf
Resource
win10v2004-20220812-en
Behavioral task
behavioral29
Sample
fonts/CALISTB.ttf
Resource
win7-20220901-en
Behavioral task
behavioral30
Sample
fonts/CALISTB.ttf
Resource
win10v2004-20220812-en
Behavioral task
behavioral31
Sample
fonts/CALISTBI.ttf
Resource
win7-20220812-en
Behavioral task
behavioral32
Sample
fonts/CALISTBI.ttf
Resource
win10v2004-20220812-en
General
-
Target
fonts/AlaskanNights.ttf
-
Size
86KB
-
MD5
6023142ebf3036a781a79c411aaa0131
-
SHA1
a37c1f9d5d252f9b16fab911a13332229d735a8b
-
SHA256
5be4c4b438cb72291ce80ee536dbca19226a1801e7a8906cfc20d1e499f64da8
-
SHA512
e3f68ec5335de1eb058e26c023522a4747469572439c7c8b3b0cde84cd8d7a11385703ac40a5149eb626701af731522f67579841da30650078bc2edc24672f95
-
SSDEEP
1536:d5ydfOTA+yFfcMS/l9QY0CKrK9ngh6+QsTvDgGagGoJ0JjFmQ:d5gfAA+qfcMhY0CCcK6dOMG1GD
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
-
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 1336 wrote to memory of 1572 1336 cmd.exe 27 PID 1336 wrote to memory of 1572 1336 cmd.exe 27 PID 1336 wrote to memory of 1572 1336 cmd.exe 27