Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
339s -
max time network
334s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
05/12/2022, 16:40
General
-
Target
e7d75ad3b658cb8faab816e12e996f201d9d945018e12ddaa9f84e656632d9bc.exe
-
Size
232KB
-
MD5
71e269f176c9876d39ec73357a73a6a1
-
SHA1
1c43e83457755f2d8beb1a0d40187a1dce65b567
-
SHA256
e7d75ad3b658cb8faab816e12e996f201d9d945018e12ddaa9f84e656632d9bc
-
SHA512
b729ffd742ae66e3fb8c6fb20f1cc2d00c5bc84bbd14526b558bbaea7fe79898c8b081d8197d18211807d26420baaee966be149b33355aaffe85c6d244107fe9
-
SSDEEP
3072:jbhBhlcIxu9WxT0VHUxCCiUzv/RqBuJxT0VH9Ymtm+Jln5O8iIYojkNZ6e7vMIRv:RM7HU7xwHdt575OnmkNN7EId/
Score
7/10
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 1 IoCs
Looks up country code configured in the registry, likely geofence.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
-
Modifies registry class 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\e7d75ad3b658cb8faab816e12e996f201d9d945018e12ddaa9f84e656632d9bc.exe"C:\Users\Admin\AppData\Local\Temp\e7d75ad3b658cb8faab816e12e996f201d9d945018e12ddaa9f84e656632d9bc.exe"1⤵
- Checks computer location settings
- Modifies registry class