Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
207s -
max time network
228s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
01/12/2022, 12:47
Static task
static1
Behavioral task
behavioral1
Sample
c9b4f77e091be4ae24da20ab4574feddc86c10592361c12a5bd0414d4f22dced.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c9b4f77e091be4ae24da20ab4574feddc86c10592361c12a5bd0414d4f22dced.exe
Resource
win10v2004-20221111-en
General
-
Target
c9b4f77e091be4ae24da20ab4574feddc86c10592361c12a5bd0414d4f22dced.exe
-
Size
84KB
-
MD5
b94e6ed6b81dac8c4a40f52b819269ff
-
SHA1
61ce136a5240c749af8a02d7358cda8ae9225700
-
SHA256
c9b4f77e091be4ae24da20ab4574feddc86c10592361c12a5bd0414d4f22dced
-
SHA512
115a74fdcf656c5a9a18dfc31a637f22e4d184e071e82e9989fe29e7842ed416c8248116b6dd925f88ce0f1324372787d1d894cb54bd16c81670d54907439de3
-
SSDEEP
1536:AboBXI8oEXm3P+GG3n3/nf3GHxoE84XffoJuGaNh4wgZaWX/:S0IzEXm3P+GG3n3/nf3GHmE8koJuGaNa
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
-
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2248 c9b4f77e091be4ae24da20ab4574feddc86c10592361c12a5bd0414d4f22dced.exe 2248 c9b4f77e091be4ae24da20ab4574feddc86c10592361c12a5bd0414d4f22dced.exe