Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Resubmissions
27/03/2023, 08:26
230327-kcbk8see71 723/12/2022, 04:08
221223-eqd1maah8x 823/12/2022, 03:43
221223-d946gsfg43 8Analysis
-
max time kernel
42s -
max time network
33s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
-
submitted
27/03/2023, 08:26
General
-
Target
b7581c0e2dc71578ffd55e69ce2c306a4372b8d11a4f34d2eb2ba7780e757b73.exe
-
Size
1006KB
-
MD5
8fb066db4762a35fac7f31cedd97cab7
-
SHA1
5e77aa679dba9ce1ba300de84c40e86f4b8d3864
-
SHA256
b7581c0e2dc71578ffd55e69ce2c306a4372b8d11a4f34d2eb2ba7780e757b73
-
SHA512
2d9104e01763315394103ca44b17ce702e7aa86e098c75f8497a2a9df175ef5ed53015b2520d7c35d2f713e566e4ae987aad9f4e1497b248bc3099f09b0ca498
-
SSDEEP
24576:6RL1fJwm75YaYh0kpwIzOalXqBpSnJh9whgefucd9Tb7:CxRwm1lYhLpwISIXqzSn/9whBfbxb
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\b7581c0e2dc71578ffd55e69ce2c306a4372b8d11a4f34d2eb2ba7780e757b73.exe"C:\Users\Admin\AppData\Local\Temp\b7581c0e2dc71578ffd55e69ce2c306a4372b8d11a4f34d2eb2ba7780e757b73.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ENC cwB0AGEAcgB0AC0AcwBsAGUAZQBwACAALQBzAGUAYwBvAG4AZABzACAAMwAwAA==2⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
-
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.9MB
-
Filesize
512KB
-
Filesize
512KB
-
Filesize
512KB
-
Filesize
512KB
-
Filesize
512KB
-
Filesize
512KB
-
Filesize
512KB
-
Filesize
32KB
-
Filesize
1000KB
-
Filesize
1000KB
-
Filesize
1000KB
-
Filesize
1000KB
-
Filesize
1000KB
-
Filesize
1000KB
-
Filesize
1000KB
-
Filesize
1000KB
-
Filesize
1000KB
-
Filesize
1000KB
-
Filesize
1000KB
-
Filesize
1000KB
-
Filesize
1000KB
-
Filesize
1024KB
-
Filesize
1000KB
-
Filesize
1000KB
-
Filesize
1000KB
-
Filesize
1000KB
-
Filesize
1000KB
-
Filesize
1000KB
-
Filesize
1000KB
-
Filesize
1000KB
-
Filesize
1000KB
-
Filesize
1000KB
-
Filesize
1000KB
-
Filesize
1000KB
-
Filesize
1000KB
-
Filesize
584KB
-
Filesize
1000KB
-
Filesize
1000KB
-
Filesize
1000KB
-
Filesize
1000KB
-
Filesize
1000KB
-
Filesize
1000KB
-
Filesize
1000KB
-
Filesize
1024KB
-
Filesize
512KB