Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
94s -
max time network
163s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
03/10/2022, 08:27
General
-
Target
b5734527da2d284db370cdc0015a68b8690a1f9359185ffcb76d5ed11525f641.exe
-
Size
160KB
-
MD5
6e429705f1efa7215f517681be189309
-
SHA1
3b9ca736efeb641cbbeafa25bf3f32a7fd60241e
-
SHA256
b5734527da2d284db370cdc0015a68b8690a1f9359185ffcb76d5ed11525f641
-
SHA512
de14f4ba7b36734dc28c8db2a42dae66dcb998d60365cde3f2ce9ae4b35b1b51d65bda1fef79a15bde9985f6baa14b3f68b44dd27d40c0e1176da98925f4f720
-
SSDEEP
3072:8sDV6Az1QWgFvYGnJd6KpZV3uTN9WU/G9h3Gw590KqkbmzALbvl6:tQAbgFvYGJd6KpZV3uTN9WU/G9h2w59X
Score
7/10
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 1 IoCs
Looks up country code configured in the registry, likely geofence.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\b5734527da2d284db370cdc0015a68b8690a1f9359185ffcb76d5ed11525f641.exe"C:\Users\Admin\AppData\Local\Temp\b5734527da2d284db370cdc0015a68b8690a1f9359185ffcb76d5ed11525f641.exe"1⤵
- Checks computer location settings
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
10.2MB