Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
151s -
max time network
166s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
28/11/2022, 02:54
General
-
Target
bef8e7a386f4aa1d36664997ba6c3aa97a3f2747c4bd9049c3feea1299c62cc5.exe
-
Size
1.7MB
-
MD5
278c537eb9ba407d3974c2ae02aeb682
-
SHA1
8737d7c6528650c5ca7bf240ac5902f57a27683e
-
SHA256
bef8e7a386f4aa1d36664997ba6c3aa97a3f2747c4bd9049c3feea1299c62cc5
-
SHA512
4dd82f528586fb6c3f4b307bf7ad4bc6b3a06a2293a0c983d58f6f7d305ade9ee14dc1dc786911c891abe267e0f88f3a936c5267f0dec4caeabce2a41920dcaf
-
SSDEEP
49152:jBHc53gdYIXt7mHHjMvB+LQAC4U/rlJS/B:jMgqQtgMvBmQApUjlI/B
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\bef8e7a386f4aa1d36664997ba6c3aa97a3f2747c4bd9049c3feea1299c62cc5.exe"C:\Users\Admin\AppData\Local\Temp\bef8e7a386f4aa1d36664997ba6c3aa97a3f2747c4bd9049c3feea1299c62cc5.exe"1⤵