Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
185s -
max time network
193s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
06/12/2022, 12:46
General
-
Target
220eb326bc70df2c0a473834d0f677028c2e1b2768267f90774f678d970ccb1c.exe
-
Size
9.9MB
-
MD5
e087256127583df071c59d35e46cdd3e
-
SHA1
67077e8a993ae502a0c972210cd4524893fb9b88
-
SHA256
220eb326bc70df2c0a473834d0f677028c2e1b2768267f90774f678d970ccb1c
-
SHA512
c03455172f76573a917767dbeb81881d6895fb598bdb414e8834ce4c10b5e28cedec911301ad0c3f1de484f5d88a45cca8ccb9250f14df9dc496731a8121a1ae
-
SSDEEP
196608:cIWMROFa13hQcPLLyrndvfKCcdGJnJ4cWq9mKD:CyOFIhxvQnRfKXG5UI
Malware Config
Signatures
-
Loads dropped DLL 5 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\220eb326bc70df2c0a473834d0f677028c2e1b2768267f90774f678d970ccb1c.exe"C:\Users\Admin\AppData\Local\Temp\220eb326bc70df2c0a473834d0f677028c2e1b2768267f90774f678d970ccb1c.exe"1⤵
- Loads dropped DLL
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.3MB
MD56daada4b8d7ae20896d601d189880601
SHA17ce6e2cf2f8d21a2241feafe704c42e78527c6ae
SHA2569bc80ce244a42af3e4c539bd131e71dc97cf258b90667e538b4fd08ff98665c5
SHA5123e23ecfe48d23976230c6e83b0b0f894ad25d9f150811b2487f9a88e0a234e947842303e0d577da016ad285442f58b970736f5bc4779c8d61aa482934a455704
-
Filesize
1.3MB
MD56daada4b8d7ae20896d601d189880601
SHA17ce6e2cf2f8d21a2241feafe704c42e78527c6ae
SHA2569bc80ce244a42af3e4c539bd131e71dc97cf258b90667e538b4fd08ff98665c5
SHA5123e23ecfe48d23976230c6e83b0b0f894ad25d9f150811b2487f9a88e0a234e947842303e0d577da016ad285442f58b970736f5bc4779c8d61aa482934a455704
-
Filesize
379KB
MD5a80a2c59aad01a5bd369d479f4f3cf3d
SHA1c01b281cdaeba9f468c18185e6f01f78a0abf287
SHA256282f40ed72cfc801ef88ab72a80c8824957aa554ece3b74842b48ecedfcf4755
SHA512db67c30e07245e1e0ee5514faf35f6fdfd94a2884cdf82f7daba1eac571067448483b5564f758e273a57ae020941322c2174827ffef1915fc37a74f0fda2d39d
-
Filesize
16KB
MD5cd9cc9fa5bf495f4e22a94836ae5c858
SHA17047c611d1ab61ec5617c75b4ea9364a51aaacd2
SHA256185a185695b171cfe22a603cda9902cdb80455ad8655fb3d2e5ffb8a5599e7ef
SHA512dcb435a8e1201c0ee82cd9f0c0c7792c4512ded10d8149fe4f7e13abe153a50da3fa388d7b3b3451875e47c05bc25cd9a12e0e83817b1954247d13fdd9db9067
-
Filesize
16KB
MD5cd9cc9fa5bf495f4e22a94836ae5c858
SHA17047c611d1ab61ec5617c75b4ea9364a51aaacd2
SHA256185a185695b171cfe22a603cda9902cdb80455ad8655fb3d2e5ffb8a5599e7ef
SHA512dcb435a8e1201c0ee82cd9f0c0c7792c4512ded10d8149fe4f7e13abe153a50da3fa388d7b3b3451875e47c05bc25cd9a12e0e83817b1954247d13fdd9db9067
-
Filesize
488KB
-
Filesize
488KB
-
Filesize
400KB
-
Filesize
400KB
-
Filesize
488KB
-
Filesize
400KB
-
Filesize
488KB
-
Filesize
148KB
-
Filesize
400KB
-
Filesize
148KB
-
Filesize
488KB
-
Filesize
400KB
-
Filesize
148KB
-
Filesize
400KB
-
Filesize
400KB
-
Filesize
400KB
-
Filesize
1.1MB
-
Filesize
5.7MB
-
Filesize
908KB
-
Filesize
2.1MB
-
Filesize
880KB
-
Filesize
400KB
-
Filesize
5.7MB
-
Filesize
2.1MB
-
Filesize
908KB
-
Filesize
464KB
-
Filesize
400KB
-
Filesize
1.1MB
-
Filesize
5.7MB
-
Filesize
2.1MB
-
Filesize
464KB
-
Filesize
400KB
-
Filesize
1.1MB
-
Filesize
5.7MB
-
Filesize
2.1MB
-
Filesize
148KB
-
Filesize
464KB
-
Filesize
400KB
-
Filesize
1.1MB
-
Filesize
5.7MB
-
Filesize
2.1MB
-
Filesize
464KB
-
Filesize
400KB
-
Filesize
1.1MB
-
Filesize
880KB
-
Filesize
5.7MB
-
Filesize
908KB
-
Filesize
464KB
-
Filesize
2.1MB
-
Filesize
400KB
-
Filesize
1.1MB
-
Filesize
5.7MB
-
Filesize
2.1MB
-
Filesize
5.7MB
-
Filesize
400KB
-
Filesize
400KB
-
Filesize
1.1MB
-
Filesize
2.1MB
-
Filesize
5.7MB
-
Filesize
2.1MB
-
Filesize
400KB
-
Filesize
1.1MB
-
Filesize
5.7MB
-
Filesize
2.1MB