Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    151s
  • max time network
    154s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    06/12/2022, 12:36

General

  • Target

    4a1b947afaed59ce4a4e59af800150201f2189cd850c5417e6a01a2eb65717e8.exe

  • Size

    903KB

  • MD5

    bd504733b77379626bb356fd406069d1

  • SHA1

    da4fef844c151580301c38ee2482c02c34ec9a16

  • SHA256

    4a1b947afaed59ce4a4e59af800150201f2189cd850c5417e6a01a2eb65717e8

  • SHA512

    fe3a45c7a465bf785b0e350f087c6437a0b0822fb240af054344dc9a65a5ab87b681cde8b0b655a807f218e65b4b98ad6e6c3eb04b3ac0fdcef865e4ac0ce203

  • SSDEEP

    12288:RhCXoQFpwZq9D4SMSgxTWVGyKGd8xJWqfoaouPHXU+V3oYb8jG3RVaHf:vCXowpwX1VWgy/WxJWA/XU+Yh//

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

Processes

  • C:\Users\Admin\AppData\Local\Temp\4a1b947afaed59ce4a4e59af800150201f2189cd850c5417e6a01a2eb65717e8.exe
    "C:\Users\Admin\AppData\Local\Temp\4a1b947afaed59ce4a4e59af800150201f2189cd850c5417e6a01a2eb65717e8.exe"
    1⤵
    • Loads dropped DLL
    PID:4880

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\nsp13F6.tmp\System.dll

    Filesize

    11KB

    MD5

    fbe295e5a1acfbd0a6271898f885fe6a

    SHA1

    d6d205922e61635472efb13c2bb92c9ac6cb96da

    SHA256

    a1390a78533c47e55cc364e97af431117126d04a7faed49390210ea3e89dd0e1

    SHA512

    2cb596971e504eaf1ce8e3f09719ebfb3f6234cea5ca7b0d33ec7500832ff4b97ec2bbe15a1fbf7e6a5b02c59db824092b9562cd8991f4d027feab6fd3177b06