Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
51s -
max time network
59s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
23/09/2022, 19:41 UTC
Static task
static1
Behavioral task
behavioral1
Sample
LegitAppNotRansomware.exe
Resource
win7-20220812-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
LegitAppNotRansomware.exe
Resource
win10v2004-20220901-en
0 signatures
150 seconds
General
-
Target
LegitAppNotRansomware.exe
-
Size
154KB
-
MD5
69385b642a4082e4b32aeb7009e14b94
-
SHA1
69fb2bea0e3e7bbd91bda662896a88d3d8a32a34
-
SHA256
24586474a090755b75495316a1f782149ab17ef935f43e1458bfff1912d17864
-
SHA512
5318d149a5b61ba2afacac534af7bf1979a7f40786012323c6217630c62b99ed22d797418044a8567b8eaf897fe4ce4fac25901a9865529e7054205a016b6af0
-
SSDEEP
3072:dwLEVbLoEZljy9611VBzEkjqr15MX7aSJtiGmH7i6R:dRXy9611VBzwU2SLiGmN
Score
1/10
Malware Config
Signatures
Processes
-
C:\Users\Admin\AppData\Local\Temp\LegitAppNotRansomware.exe"C:\Users\Admin\AppData\Local\Temp\LegitAppNotRansomware.exe"1⤵PID:3036
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:4396