Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

b180f13d74...44.exe

windows7-x64

8

b180f13d74...44.exe

windows10-2004-x64

8

Analysis

  • max time kernel
    112s
  • max time network
    141s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19/09/2022, 09:59

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    b180f13d745f4b2dc2601ad87eddf9c6f5de1c91a489bc85884d3c7a9e0b1a44.exe

  • Size

    347KB

  • MD5

    94fd65c600ed754dcff53bf9c62672a0

  • SHA1

    fa81cfa9b4f33fdc3eca248b0b445455b5c1d5d7

  • SHA256

    b180f13d745f4b2dc2601ad87eddf9c6f5de1c91a489bc85884d3c7a9e0b1a44

  • SHA512

    848d80e1ee5dcc3a9132ac02fb51fa54c206744880fe04acbde448c4b318ab14076c81e37da5de44c57ca63e7de15622d331075d1a6209b4993e84d2c4359905

  • SSDEEP

    6144:HC5gqTN71xWDD7k0SIufIi9caMvb4lQMKLjP1REVhPMdELungetN:H2N7u/7ZuQi9WvUaMKLTYvAltN

Score
8/10
ransomware

Malware Config

Signatures

  • Modifies extensions of user files 2 IoCs

    Ransomware generally changes the extension on encrypted files.

    ransomware
  • Drops desktop.ini file(s) 5 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\b180f13d745f4b2dc2601ad87eddf9c6f5de1c91a489bc85884d3c7a9e0b1a44.exe
    "C:\Users\Admin\AppData\Local\Temp\b180f13d745f4b2dc2601ad87eddf9c6f5de1c91a489bc85884d3c7a9e0b1a44.exe"
    1⤵
    • Modifies extensions of user files
    • Drops desktop.ini file(s)
    PID:3996

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3996-132-0x0000000000D50000-0x0000000000DAC000-memory.dmp

    Filesize

    368KB

    Download

  • memory/3996-133-0x0000000005D90000-0x0000000006334000-memory.dmp

    Filesize

    5.6MB

    Download

  • memory/3996-134-0x00000000057E0000-0x0000000005872000-memory.dmp

    Filesize

    584KB

    Download

  • memory/3996-135-0x0000000005750000-0x000000000575A000-memory.dmp

    Filesize

    40KB

    Download