Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
141s -
max time network
106s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
09/03/2023, 07:33
Static task
static1
Behavioral task
behavioral1
Sample
dad4e4cbfbe903daee025826a3816a4fb74bddd50d5e0038f928c16b2e99502f.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
dad4e4cbfbe903daee025826a3816a4fb74bddd50d5e0038f928c16b2e99502f.exe
Resource
win10v2004-20230220-en
General
-
Target
dad4e4cbfbe903daee025826a3816a4fb74bddd50d5e0038f928c16b2e99502f.exe
-
Size
263KB
-
MD5
e1dec890508c89a8f468db0cff684f83
-
SHA1
7a0f9d861eaa55a8c1f5c7c0fffe421ef89ff652
-
SHA256
dad4e4cbfbe903daee025826a3816a4fb74bddd50d5e0038f928c16b2e99502f
-
SHA512
8b24f7fa552e9f24ee4594c63c2e91eeee3831dba8b0d78435c17cad919768c25826b0fb7a041956546f56edae8a502eff260aec7cbee8e359c841c1a34b9f4a
-
SSDEEP
6144:gYa6+YxKBm16Bj9lWAbkKXVa9S02ZVh2Qs/cEpeXzhdGZbghHrOSm:gYI7maj9tk9Svu/cW0zhsKhFm
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.