Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
149s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
03/12/2022, 01:48
General
-
Target
a6ceaa7bb228805c0a3015a33a7a119e610c04036d4b5c890d02125df45aa8a3.exe
-
Size
160KB
-
MD5
08229b6d17b7869e80f070261ca0ef42
-
SHA1
3b636a4a5a61bab5ce6d6fe6f2092b7328f30a3e
-
SHA256
a6ceaa7bb228805c0a3015a33a7a119e610c04036d4b5c890d02125df45aa8a3
-
SHA512
7c5abd9bbcb842c56c974cc005ff03606baf82e8cb6d5c158b21d4b627cca25cd3885ee098b8d05ff9108c00dd0b2f73ab3453e19f0920b9b737e799832bed92
-
SSDEEP
3072:8sDV6Az1lWgFvYGnJd6KpZVOuTN9WU/G9h3Gw590KqWbmzALbvl6:tQAKgFvYGJd6KpZVOuTN9WU/G9h2w591
Score
7/10
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 1 IoCs
Looks up country code configured in the registry, likely geofence.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\a6ceaa7bb228805c0a3015a33a7a119e610c04036d4b5c890d02125df45aa8a3.exe"C:\Users\Admin\AppData\Local\Temp\a6ceaa7bb228805c0a3015a33a7a119e610c04036d4b5c890d02125df45aa8a3.exe"1⤵
- Checks computer location settings
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
10.2MB