Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
135s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
07/11/2022, 07:53
Static task
static1
Behavioral task
behavioral1
Sample
aba25e928f9dddc4372e0fbae2c8a8a6a98ff1b5b38477a4bef62ecd7765719c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
aba25e928f9dddc4372e0fbae2c8a8a6a98ff1b5b38477a4bef62ecd7765719c.exe
Resource
win10v2004-20220901-en
General
-
Target
aba25e928f9dddc4372e0fbae2c8a8a6a98ff1b5b38477a4bef62ecd7765719c.exe
-
Size
370KB
-
MD5
2e02cd9194aa2bea35fa6464b5d24224
-
SHA1
601009de5788d2c7786a6f2fb04ff3952610c779
-
SHA256
aba25e928f9dddc4372e0fbae2c8a8a6a98ff1b5b38477a4bef62ecd7765719c
-
SHA512
1a0163b225aef126eed486422949fbab4c509039bf4eb559d5f49e516ac808aee95ed8fe2c04a62f13d3036f7c0e4cf822db33b3415ef6a9ec1206ee2e941613
-
SSDEEP
6144:HSDFgijJcKR8eskWuaCGzNzsKuDLY8/7E/k375qsXN/nglUL9LnQn2H+LdTNyJ:yBgijWVe7aCIz5+QsLRXOBkJ
Malware Config
Signatures
-
Drops startup file 1 IoCs
description ioc Process File created C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\aba25e928f9dddc4372e0fbae2c8a8a6a98ff1b5b38477a4bef62ecd7765719c.lnk aba25e928f9dddc4372e0fbae2c8a8a6a98ff1b5b38477a4bef62ecd7765719c.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.