Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
154s -
max time network
179s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
19/09/2022, 05:54
Static task
static1
Behavioral task
behavioral1
Sample
36ce9619a8af4024f149e55a5472f674cf8274ad90c6c770a009891ec0abfcba.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
36ce9619a8af4024f149e55a5472f674cf8274ad90c6c770a009891ec0abfcba.exe
Resource
win10v2004-20220812-en
General
-
Target
36ce9619a8af4024f149e55a5472f674cf8274ad90c6c770a009891ec0abfcba.exe
-
Size
904KB
-
MD5
77fb108746bad0e36112a7c8f3ea7e0b
-
SHA1
edd010e27b541bef2e82be2b0e6e7f9067606e58
-
SHA256
36ce9619a8af4024f149e55a5472f674cf8274ad90c6c770a009891ec0abfcba
-
SHA512
2aac056fc170850cbeb53000a0f3d2c45fc46eac68f1fc8fc6e7437f0e66ecfaf831fb536063980fabb75654d43e757adb1d384f482a66dd6c48c02028bdbb1f
-
SSDEEP
24576:qKgG+T4UljQCQJMIeYliGnsLXXFfeSsib:BgNECQ2IegpnMFepM
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.