Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
319s -
max time network
353s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
05/12/2022, 11:03
Static task
static1
Behavioral task
behavioral1
Sample
bfbaf4d497c3df1f35954afc9fe982e18fca24de805381796ba4596d66ef56e4.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
bfbaf4d497c3df1f35954afc9fe982e18fca24de805381796ba4596d66ef56e4.exe
Resource
win10v2004-20221111-en
General
-
Target
bfbaf4d497c3df1f35954afc9fe982e18fca24de805381796ba4596d66ef56e4.exe
-
Size
1.7MB
-
MD5
d0cf4a34959b60e2811c612a9005d67f
-
SHA1
9a3f6386d389b9e90935eb3e4922a3dd5c67ecc4
-
SHA256
bfbaf4d497c3df1f35954afc9fe982e18fca24de805381796ba4596d66ef56e4
-
SHA512
c6195f647f1d34cb18bf17a6c7a1c9c0285fe67d658fb42261e7b720f960d3aaf71ade9f52276bd55d875c9cd3233dd2885b6af0ee1f12bc9cf80444f17577cd
-
SSDEEP
49152:Ghpa04tCZTYPWRX7gGqo3gwgQWGvhYtFN:WpJTY8Lglo3jgnGvhUb
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.