Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
10Static
static
Use_50505_...rd.rar
windows10-2004-x64
Setup.exe
windows10-2004-x64
5langs/Croatian.ini
windows10-2004-x64
1langs/Danish.ini
windows10-2004-x64
1langs/English.ini
windows10-2004-x64
1langs/Finnish.ini
windows10-2004-x64
1langs/Hebrew.ini
windows10-2004-x64
1langs/Hungarian.ps1
windows10-2004-x64
1langs/Indonesian.ini
windows10-2004-x64
1langs/Japanese.ini
windows10-2004-x64
1langs/Kazakh.ini
windows10-2004-x64
1langs/Korean.ps1
windows10-2004-x64
1langs/Kurdish.ini
windows10-2004-x64
1langs/Norwegian.ini
windows10-2004-x64
1langs/SimpChinese.ini
windows10-2004-x64
1langs/Sinhala.ini
windows10-2004-x64
1langs/Slovak.ini
windows10-2004-x64
1langs/Swedish.ini
windows10-2004-x64
1langs/Thai.ini
windows10-2004-x64
1langs/TradChinese.ini
windows10-2004-x64
1langs/Ukrainian.ini
windows10-2004-x64
1langs/UyghurLatin.ini
windows10-2004-x64
1langs/Uzbek.ini
windows10-2004-x64
1langs/Vietnamese.ini
windows10-2004-x64
1Analysis
-
max time kernel
1543s -
max time network
1585s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
26/12/2022, 20:20
Static task
static1
Behavioral task
behavioral1
Sample
Use_50505_As_Passw0rd.rar
Resource
win10v2004-20221111-en
Behavioral task
behavioral2
Sample
Setup.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
langs/Croatian.ini
Resource
win10v2004-20220901-en
Behavioral task
behavioral4
Sample
langs/Danish.ini
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
langs/English.ini
Resource
win10v2004-20221111-en
Behavioral task
behavioral6
Sample
langs/Finnish.ini
Resource
win10v2004-20220812-en
Behavioral task
behavioral7
Sample
langs/Hebrew.ini
Resource
win10v2004-20220812-en
Behavioral task
behavioral8
Sample
langs/Hungarian.ps1
Resource
win10v2004-20221111-en
Behavioral task
behavioral9
Sample
langs/Indonesian.ini
Resource
win10v2004-20221111-en
Behavioral task
behavioral10
Sample
langs/Japanese.ini
Resource
win10v2004-20220812-en
Behavioral task
behavioral11
Sample
langs/Kazakh.ini
Resource
win10v2004-20221111-en
Behavioral task
behavioral12
Sample
langs/Korean.ps1
Resource
win10v2004-20220901-en
Behavioral task
behavioral13
Sample
langs/Kurdish.ini
Resource
win10v2004-20220812-en
Behavioral task
behavioral14
Sample
langs/Norwegian.ini
Resource
win10v2004-20221111-en
Behavioral task
behavioral15
Sample
langs/SimpChinese.ini
Resource
win10v2004-20220812-en
Behavioral task
behavioral16
Sample
langs/Sinhala.ini
Resource
win10v2004-20220812-en
Behavioral task
behavioral17
Sample
langs/Slovak.ini
Resource
win10v2004-20221111-en
Behavioral task
behavioral18
Sample
langs/Swedish.ini
Resource
win10v2004-20221111-en
Behavioral task
behavioral19
Sample
langs/Thai.ini
Resource
win10v2004-20220901-en
Behavioral task
behavioral20
Sample
langs/TradChinese.ini
Resource
win10v2004-20221111-en
Behavioral task
behavioral21
Sample
langs/Ukrainian.ini
Resource
win10v2004-20220812-en
Behavioral task
behavioral22
Sample
langs/UyghurLatin.ini
Resource
win10v2004-20221111-en
Behavioral task
behavioral23
Sample
langs/Uzbek.ini
Resource
win10v2004-20220812-en
Behavioral task
behavioral24
Sample
langs/Vietnamese.ini
Resource
win10v2004-20221111-en
General
-
Target
langs/Indonesian.ini
-
Size
105KB
-
MD5
d944d8a3551719a176db4da31733ab75
-
SHA1
6cf51cb43dbd7ca84334389076adbabe407d95b8
-
SHA256
9e52e0b1f7ec39a36e2edd0231dc98865de8524a651fcf6b1b948a575e35fd0f
-
SHA512
b9077bdeb69e07894c995bd519ebab594016c8077a213b29264a8040370c9841f1ad6dada2d0af595a596a3875f9c9989dc30af8e7c7b981b420cf1382d5c9a6
-
SSDEEP
768:wbWt5bTJA+NtkooQG+Wioa6lBT8IwUzCc0qfcLVUWf1RzVARBBfxP7KLVoeY4z9v:9bT+atkwR2AIheY4pMOy0F8gx
Malware Config
Signatures
-
Opens file in notepad (likely ransom note) 1 IoCs
pid Process 5028 NOTEPAD.EXE