Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
36s -
max time network
41s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
03/12/2022, 12:54
Static task
static1
Behavioral task
behavioral1
Sample
eb45ee29f3f89412c55b63c0113670bbf7cc75d66281695baeddd9995fa8f7d0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
eb45ee29f3f89412c55b63c0113670bbf7cc75d66281695baeddd9995fa8f7d0.exe
Resource
win10v2004-20221111-en
General
-
Target
eb45ee29f3f89412c55b63c0113670bbf7cc75d66281695baeddd9995fa8f7d0.exe
-
Size
562KB
-
MD5
ea7fb4b784a22bff04621c04a45e9d40
-
SHA1
36f2d3b09a4f118e252f667267373394cd4cf963
-
SHA256
eb45ee29f3f89412c55b63c0113670bbf7cc75d66281695baeddd9995fa8f7d0
-
SHA512
af54b873a78e9ba63a97ac9b09bfe9f192737fd47c0baa76ff1b19d283c0d676e06904c5700ffe6bf26e3e6cf12ef5cf8be9ddb21693ad36819f5e92365348c1
-
SSDEEP
12288:cCK+qK4QIUJ6ItO49LpwEBXu+OKex+VwKDPFIihoGqz765OMF6:cChqKgU79usbkx+VNJhofz765hA
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
-
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2036 eb45ee29f3f89412c55b63c0113670bbf7cc75d66281695baeddd9995fa8f7d0.exe