Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
10Static
static
Calculation.lnk
windows7-x64
3Calculation.lnk
windows10-2004-x64
3look/alsoThere.js
windows7-x64
3look/alsoThere.js
windows10-2004-x64
1look/forLook.bat
windows7-x64
1look/forLook.bat
windows10-2004-x64
1look/youIn.dll
windows7-x64
1look/youIn.dll
windows10-2004-x64
1more/thisWhich.bat
windows7-x64
1more/thisWhich.bat
windows10-2004-x64
1more/whichHe.js
windows7-x64
3more/whichHe.js
windows10-2004-x64
1more/willThing.dll
windows7-x64
10more/willThing.dll
windows10-2004-x64
10Analysis
-
max time kernel
91s -
max time network
139s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
19/09/2022, 08:52
Static task
static1
Behavioral task
behavioral1
Sample
Calculation.lnk
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Calculation.lnk
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
look/alsoThere.js
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
look/alsoThere.js
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
look/forLook.bat
Resource
win7-20220901-en
Behavioral task
behavioral6
Sample
look/forLook.bat
Resource
win10v2004-20220901-en
Behavioral task
behavioral7
Sample
look/youIn.dll
Resource
win7-20220901-en
Behavioral task
behavioral8
Sample
look/youIn.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral9
Sample
more/thisWhich.bat
Resource
win7-20220901-en
Behavioral task
behavioral10
Sample
more/thisWhich.bat
Resource
win10v2004-20220812-en
Behavioral task
behavioral11
Sample
more/whichHe.js
Resource
win7-20220812-en
Behavioral task
behavioral12
Sample
more/whichHe.js
Resource
win10v2004-20220812-en
Behavioral task
behavioral13
Sample
more/willThing.dll
Resource
win7-20220812-en
General
-
Target
Calculation.lnk
-
Size
1KB
-
MD5
2faf93e37e2149ec7ae5e34d0cd11776
-
SHA1
a0c34b74fe1963d7fd087722973597201518f3ef
-
SHA256
8deaa2ebfa885a65ee6b444c7ad78fe4929bd43207ffc8294de59f520f056e05
-
SHA512
117141c2bf972edf5e27d9de04406c32854285b724ac92071c509efc2b55241b203ce40411af8bfc0afbf2d9b2f5c8222722eb21c520b449dd24e235ad7b415c
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.