Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
202s -
max time network
242s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
05/12/2022, 17:57
Static task
static1
Behavioral task
behavioral1
Sample
57150201035e20c7605a110c4394babe6e350afd1a572942dec4562f0f0796a7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
57150201035e20c7605a110c4394babe6e350afd1a572942dec4562f0f0796a7.exe
Resource
win10v2004-20221111-en
General
-
Target
57150201035e20c7605a110c4394babe6e350afd1a572942dec4562f0f0796a7.exe
-
Size
1.3MB
-
MD5
e7fd3408b43d344a106d0989d7ac4213
-
SHA1
c0e560fc61957845349713cf5ab4ffd153570dc5
-
SHA256
57150201035e20c7605a110c4394babe6e350afd1a572942dec4562f0f0796a7
-
SHA512
22d2512f7545344ea8528369d5162c8bc4371b3457862fd46696971179f85ca2e93170edc561c2f304d9762e89bc57fcb14aabc68dd567408c6a529de5246629
-
SSDEEP
24576:pT4UlJOeZ296lSi7vFEr+dxhfzLlo3HhzBiFH7M/8z0g/gQ:xARYxR7LY1ie/8Aal
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.