Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

AsusSetup.exe

windows7-x64

1

AsusSetup.exe

windows10-2004-x64

5

AsusSetup.ini

windows7-x64

1

AsusSetup.ini

windows10-2004-x64

1

English.ini

windows7-x64

1

English.ini

windows10-2004-x64

1

French.ini

windows7-x64

1

French.ini

windows10-2004-x64

1

German.ini

windows7-x64

1

German.ini

windows10-2004-x64

1

Install.bat

windows7-x64

1

Install.bat

windows10-2004-x64

5

Japanese.ini

windows7-x64

1

Japanese.ini

windows10-2004-x64

1

Korean.ini

windows7-x64

1

Korean.ini

windows10-2004-x64

1

Russian.ini

windows7-x64

1

Russian.ini

windows10-2004-x64

1

SChinese.ini

windows7-x64

1

SChinese.ini

windows10-2004-x64

1

Spanish.ini

windows7-x64

1

Spanish.ini

windows10-2004-x64

1

TChinese.ini

windows7-x64

1

TChinese.ini

windows10-2004-x64

1

Ukrainian.ini

windows7-x64

1

Ukrainian.ini

windows10-2004-x64

1

ibtusb.cat

windows7-x64

8

ibtusb.cat

windows10-2004-x64

1

ibtusb.inf

windows7-x64

1

ibtusb.inf

windows10-2004-x64

1

ibtusb.exe

windows7-x64

ibtusb.exe

windows10-2004-x64

Analysis

  • max time kernel
    39s
  • max time network
    44s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    08/01/2023, 05:11

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    AsusSetup.ini

  • Size

    3KB

  • MD5

    923bf28589d8dc537572ad08e5f66083

  • SHA1

    503b55ec71457cf0dc4f4c4f9f94e060fb5620c9

  • SHA256

    99cffec8dcce3b49527bd8d63869a8307cc7679236bd494c0a10024ebed7feda

  • SHA512

    e69c4d1efc0251a0837d23a6a3bca192a6496a9a41983d6e43e3575898822581db3173c0fc8c4cbc6d49cd6a2f7b8d9077b73f35a4f36d128798c0458adf91af

Score
1/10

Malware Config

Signatures

  • Opens file in notepad (likely ransom note) 1 IoCs
    ransomware

Processes

  • C:\Windows\system32\NOTEPAD.EXE
    C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\AsusSetup.ini
    1⤵
    • Opens file in notepad (likely ransom note)
    PID:856

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/856-54-0x000007FEFBD11000-0x000007FEFBD13000-memory.dmp

    Filesize

    8KB

    Download