Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
152s -
max time network
193s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
27/11/2022, 14:02
Static task
static1
Behavioral task
behavioral1
Sample
815dd7e6fc36737b7dbc617316ef57ffb952b8c74af43eb749ff47d08e60b1ae.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
815dd7e6fc36737b7dbc617316ef57ffb952b8c74af43eb749ff47d08e60b1ae.exe
Resource
win10v2004-20221111-en
General
-
Target
815dd7e6fc36737b7dbc617316ef57ffb952b8c74af43eb749ff47d08e60b1ae.exe
-
Size
299KB
-
MD5
713e38e356fa0aa21977a1bd6577998f
-
SHA1
c5d0b4236cc7b093769df643e5b68488821eb81c
-
SHA256
815dd7e6fc36737b7dbc617316ef57ffb952b8c74af43eb749ff47d08e60b1ae
-
SHA512
20def91c952fefe82d335e79b48f2f6b0e0de5cd27fa704f24e4b5afe065b5be5b2c6043e98adcfde0aaf0f03d35cc925dfde0601beda0ee51715dc05489f653
-
SSDEEP
6144:SPSjQHJwRRtmrhWAr2J9gT6YTwLldakeIHFebTF59:swRRtmrhWACHW0MkFIbTF59
Malware Config
Signatures
-
Drops startup file 1 IoCs
description ioc Process File created C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\815dd7e6fc36737b7dbc617316ef57ffb952b8c74af43eb749ff47d08e60b1ae.lnk 815dd7e6fc36737b7dbc617316ef57ffb952b8c74af43eb749ff47d08e60b1ae.exe -
Drops file in Windows directory 1 IoCs
description ioc Process File created C:\Windows\Tasks\Bidaily Synchronize Task.job 815dd7e6fc36737b7dbc617316ef57ffb952b8c74af43eb749ff47d08e60b1ae.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.