Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
300s -
max time network
263s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
02/03/2023, 11:27
Static task
static1
Behavioral task
behavioral1
Sample
MSVCR100.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral2
Sample
WebView2Loader.dll
Resource
win10v2004-20230221-en
Behavioral task
behavioral3
Sample
at.txt
Resource
win10v2004-20230220-en
Behavioral task
behavioral4
Sample
b.txt
Resource
win10v2004-20230220-en
Behavioral task
behavioral5
Sample
exe.exe
Resource
win10v2004-20230220-en
Behavioral task
behavioral6
Sample
i7.exe
Resource
win10v2004-20230220-en
Behavioral task
behavioral7
Sample
jli.dll
Resource
win10v2004-20230220-en
General
-
Target
b.txt
-
Size
23KB
-
MD5
1a7a6bf11337f0de5ba28ebd93afed06
-
SHA1
c5e6ffae9a8edc7fe4620a61d23f387b06ea63ae
-
SHA256
c62acf95bf44552f63a3dc44616869c1c40475b971182f52606440b0eebfbb21
-
SHA512
d7f93a1d44b687cee76a3982e935ff6e8e487db8d72b77d22022e6e46bac0c5ffe74cc613f5761b3ca33157a3454a9c8039c11e7c8f5f546795bbd13478915a4
-
SSDEEP
384:MK/cBozUqKi8DsHqjFnKNSTYY0Rez/5QLkWN6vXiAq+7UYaiaeOaIfxVh+bJ/jIq:5/vUqKFsKw0h1QL7Qvy8UYP6aIfxVgb7
Malware Config
Signatures
-
Opens file in notepad (likely ransom note) 1 IoCs
pid Process 4636 NOTEPAD.EXE