Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
67s -
max time network
45s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
02/11/2022, 13:06
Static task
static1
Behavioral task
behavioral1
Sample
SOLICITUDE DE OFERTA.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
SOLICITUDE DE OFERTA.exe
Resource
win10v2004-20220812-en
General
-
Target
SOLICITUDE DE OFERTA.exe
-
Size
425KB
-
MD5
2687c2bb873860582eda04a922cc25c5
-
SHA1
c03013a9ba4fe1d09f20a227922666262f0cbf03
-
SHA256
577951a71889a4ccb62d89f6a7330fef42257110e780793116af09f8b4d4be6a
-
SHA512
6a53f9e898f128fe449a5c2a008b9f8efa159feacee55b9151aa803c76e429180e454d4b71a80f066f7b55892d34b71b11e570f1e2f76c60676bd42989af4afe
-
SSDEEP
6144:gbE/HUUvkKpEB3nNU1JiOZkEPLB6WAs60dD2Nat:gbQcxRokcB6W/fdDX
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
pid Process 1784 SOLICITUDE DE OFERTA.exe -
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in Program Files directory 1 IoCs
description ioc Process File opened for modification C:\Program Files (x86)\foedselsaar\demurrer\Bevgelsesformernes\kodeordenes.Ren SOLICITUDE DE OFERTA.exe -
Drops file in Windows directory 1 IoCs
description ioc Process File opened for modification C:\Windows\Fonts\Lambdoidal\Branchiopodous\Brysternes\Stynings16.Spr SOLICITUDE DE OFERTA.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
12KB
MD5cff85c549d536f651d4fb8387f1976f2
SHA1d41ce3a5ff609df9cf5c7e207d3b59bf8a48530e
SHA2568dc562cda7217a3a52db898243de3e2ed68b80e62ddcb8619545ed0b4e7f65a8
SHA512531d6328daf3b86d85556016d299798fa06fefc81604185108a342d000e203094c8c12226a12bd6e1f89b0db501fb66f827b610d460b933bd4ab936ac2fd8a88