Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
10Static
static
Use_50505_...rd.rar
windows10-2004-x64
Setup.exe
windows10-2004-x64
5langs/Croatian.ini
windows10-2004-x64
1langs/Danish.ini
windows10-2004-x64
1langs/English.ini
windows10-2004-x64
1langs/Finnish.ini
windows10-2004-x64
1langs/Hebrew.ini
windows10-2004-x64
1langs/Hungarian.ps1
windows10-2004-x64
1langs/Indonesian.ini
windows10-2004-x64
1langs/Japanese.ini
windows10-2004-x64
1langs/Kazakh.ini
windows10-2004-x64
1langs/Korean.ps1
windows10-2004-x64
1langs/Kurdish.ini
windows10-2004-x64
1langs/Norwegian.ini
windows10-2004-x64
1langs/SimpChinese.ini
windows10-2004-x64
1langs/Sinhala.ini
windows10-2004-x64
1langs/Slovak.ini
windows10-2004-x64
1langs/Swedish.ini
windows10-2004-x64
1langs/Thai.ini
windows10-2004-x64
1langs/TradChinese.ini
windows10-2004-x64
1langs/Ukrainian.ini
windows10-2004-x64
1langs/UyghurLatin.ini
windows10-2004-x64
1langs/Uzbek.ini
windows10-2004-x64
1langs/Vietnamese.ini
windows10-2004-x64
1Analysis
-
max time kernel
302s -
max time network
361s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
26/12/2022, 20:20
Static task
static1
Behavioral task
behavioral1
Sample
Use_50505_As_Passw0rd.rar
Resource
win10v2004-20221111-en
Behavioral task
behavioral2
Sample
Setup.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
langs/Croatian.ini
Resource
win10v2004-20220901-en
Behavioral task
behavioral4
Sample
langs/Danish.ini
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
langs/English.ini
Resource
win10v2004-20221111-en
Behavioral task
behavioral6
Sample
langs/Finnish.ini
Resource
win10v2004-20220812-en
Behavioral task
behavioral7
Sample
langs/Hebrew.ini
Resource
win10v2004-20220812-en
Behavioral task
behavioral8
Sample
langs/Hungarian.ps1
Resource
win10v2004-20221111-en
Behavioral task
behavioral9
Sample
langs/Indonesian.ini
Resource
win10v2004-20221111-en
Behavioral task
behavioral10
Sample
langs/Japanese.ini
Resource
win10v2004-20220812-en
Behavioral task
behavioral11
Sample
langs/Kazakh.ini
Resource
win10v2004-20221111-en
Behavioral task
behavioral12
Sample
langs/Korean.ps1
Resource
win10v2004-20220901-en
Behavioral task
behavioral13
Sample
langs/Kurdish.ini
Resource
win10v2004-20220812-en
Behavioral task
behavioral14
Sample
langs/Norwegian.ini
Resource
win10v2004-20221111-en
Behavioral task
behavioral15
Sample
langs/SimpChinese.ini
Resource
win10v2004-20220812-en
Behavioral task
behavioral16
Sample
langs/Sinhala.ini
Resource
win10v2004-20220812-en
Behavioral task
behavioral17
Sample
langs/Slovak.ini
Resource
win10v2004-20221111-en
Behavioral task
behavioral18
Sample
langs/Swedish.ini
Resource
win10v2004-20221111-en
Behavioral task
behavioral19
Sample
langs/Thai.ini
Resource
win10v2004-20220901-en
Behavioral task
behavioral20
Sample
langs/TradChinese.ini
Resource
win10v2004-20221111-en
Behavioral task
behavioral21
Sample
langs/Ukrainian.ini
Resource
win10v2004-20220812-en
Behavioral task
behavioral22
Sample
langs/UyghurLatin.ini
Resource
win10v2004-20221111-en
Behavioral task
behavioral23
Sample
langs/Uzbek.ini
Resource
win10v2004-20220812-en
Behavioral task
behavioral24
Sample
langs/Vietnamese.ini
Resource
win10v2004-20221111-en
General
-
Target
langs/Croatian.ini
-
Size
105KB
-
MD5
8477123868f12632d652c6da5df683c2
-
SHA1
23dbeba17e366e1bb5e7d7be156a9be309c9555d
-
SHA256
5bf2b70edb78073f3ce4fe6d809a3a25c982cb2840b8ebaf4367ebc42f16bd3e
-
SHA512
b785f8d680f22211c01cfa59cdf86f1bfdeca0446c1c26fc2c144e3018773d22e4050c95cd513d60df9b226df31dc504b5059db168977b3949dbcc428a7ff30d
-
SSDEEP
768:w0VnpiuM0pY1HIlw1VoIGRweBLUab7Fno8wBtA1yR4IY52t9RM8wE4c+Tyb3TRr2:VdpiuM0pY1olaEZLUYg4c+7wvO60ll
Malware Config
Signatures
-
Opens file in notepad (likely ransom note) 1 IoCs
pid Process 3012 NOTEPAD.EXE