Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
60s -
max time network
125s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
27/11/2022, 19:18
Static task
static1
Behavioral task
behavioral1
Sample
9db90f1e0e42fbed77aa9103d5c1481717b84a52362f9c9daca6f93841b28ec5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9db90f1e0e42fbed77aa9103d5c1481717b84a52362f9c9daca6f93841b28ec5.exe
Resource
win10v2004-20220901-en
General
-
Target
9db90f1e0e42fbed77aa9103d5c1481717b84a52362f9c9daca6f93841b28ec5.exe
-
Size
214KB
-
MD5
c87075180a734456aaa9db13a0759d0a
-
SHA1
3dcba6e550417ffd5c78eed8306bb20f7a739ef4
-
SHA256
9db90f1e0e42fbed77aa9103d5c1481717b84a52362f9c9daca6f93841b28ec5
-
SHA512
78d7990e04adbaffa8d3a2eb2ae6641c9b75d6f0416104a42b401bb3495ddb9c9b2018e822bb22f0a4d395219c589810957a95bc6b8e953278b20dba655a7249
-
SSDEEP
3072:L1W3koFABSTdUc0X1gwntSffzCXOJl/afyyCv1ZXsJHLhQ0ErqLchDPmT2a3xfym:LI2udl55ffzC+Jw6y2ZXT0EYWPi3xfym
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.