Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
154s -
max time network
193s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
03/12/2022, 13:28
Static task
static1
Behavioral task
behavioral1
Sample
c67d99fc8f8b47a654e90b86ed992ee933a31ea5b219359dad9b131306ec16c4.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c67d99fc8f8b47a654e90b86ed992ee933a31ea5b219359dad9b131306ec16c4.exe
Resource
win10v2004-20221111-en
General
-
Target
c67d99fc8f8b47a654e90b86ed992ee933a31ea5b219359dad9b131306ec16c4.exe
-
Size
43KB
-
MD5
338c35c21cf983634161cb78bb1857e0
-
SHA1
00de00066f8fa144112b0d28bd105e2f8c22bb0e
-
SHA256
c67d99fc8f8b47a654e90b86ed992ee933a31ea5b219359dad9b131306ec16c4
-
SHA512
a1b7cf0f18f938593c4ec52d629ffd5aa7e8ecbfef06bddeefd8708add6b61fd8bbeaf102196fcd81dd318440081458ac73ac3ac92b61a80c16ae86d8b3dba49
-
SSDEEP
768:5Cpw7JthQC0PJ7oNGxLllmX1fPH8ANVkrpMumz8z2+r4dR:Apw7JTQbsHEANVgMlppR
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\c67d99fc8f8b47a654e90b86ed992ee933a31ea5b219359dad9b131306ec16c4.exe"C:\Users\Admin\AppData\Local\Temp\c67d99fc8f8b47a654e90b86ed992ee933a31ea5b219359dad9b131306ec16c4.exe"1⤵PID:2936
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵PID:1388