Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    311s
  • max time network
    352s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    05/12/2022, 09:39

General

  • Target

    a0d6a201ad600de8df5400c1966811cbbe735016aaadc425ab8454295f6096d3.exe

  • Size

    232KB

  • MD5

    771d377461b7a51656c87fb7a172939e

  • SHA1

    821c9253e2c5aaa72c3e77b4d1c33c9423e6a5c3

  • SHA256

    a0d6a201ad600de8df5400c1966811cbbe735016aaadc425ab8454295f6096d3

  • SHA512

    179340e3e922f32d5091fc06d681949e2365fe3ca35d7cbec8557231982c45cc6df5b65efd32e31f8471faf172c80f73bc08136859725444816f2b056a06874d

  • SSDEEP

    6144:QyG03PFKs78vpRTlEqxF6snji81RUinKbLYx:bPhpu

Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\a0d6a201ad600de8df5400c1966811cbbe735016aaadc425ab8454295f6096d3.exe
    "C:\Users\Admin\AppData\Local\Temp\a0d6a201ad600de8df5400c1966811cbbe735016aaadc425ab8454295f6096d3.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:5080

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads