Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
10Static
static
1CompleteSe...on.rar
windows7-x64
3CompleteSe...on.rar
windows10-2004-x64
3Full_PassWord.txt
windows7-x64
1Full_PassWord.txt
windows10-2004-x64
1Newest_Set...ey.rar
windows7-x64
3Newest_Set...ey.rar
windows10-2004-x64
3LicenseKey.txt
windows7-x64
1LicenseKey.txt
windows10-2004-x64
1SetupFile.exe
windows7-x64
10SetupFile.exe
windows10-2004-x64
10Analysis
-
max time kernel
1623s -
max time network
1627s -
platform
windows7_x64 -
resource
win7-20230220-es -
resource tags
arch:x64arch:x86image:win7-20230220-eslocale:es-esos:windows7-x64systemwindows -
submitted
02/04/2023, 17:19
Static task
static1
Behavioral task
behavioral1
Sample
CompleteSetup_Full_Version.rar
Resource
win7-20230220-es
Behavioral task
behavioral2
Sample
CompleteSetup_Full_Version.rar
Resource
win10v2004-20230220-es
Behavioral task
behavioral3
Sample
Full_PassWord.txt
Resource
win7-20230220-es
Behavioral task
behavioral4
Sample
Full_PassWord.txt
Resource
win10v2004-20230221-es
Behavioral task
behavioral5
Sample
Newest_Setup_2023_As_PassKey.rar
Resource
win7-20230220-es
Behavioral task
behavioral6
Sample
Newest_Setup_2023_As_PassKey.rar
Resource
win10v2004-20230220-es
Behavioral task
behavioral7
Sample
LicenseKey.txt
Resource
win7-20230220-es
Behavioral task
behavioral8
Sample
LicenseKey.txt
Resource
win10v2004-20230220-es
Behavioral task
behavioral9
Sample
SetupFile.exe
Resource
win7-20230220-es
Behavioral task
behavioral10
Sample
SetupFile.exe
Resource
win10v2004-20230220-es
General
-
Target
Full_PassWord.txt
-
Size
1.1MB
-
MD5
7fd66ca3b881ea3c12ba8463d1c5392f
-
SHA1
5639c4f7895f9c20e1bf310b6554d0ef80bdb9bb
-
SHA256
041a5d50e9a15622ba4d04b38f2474e3bd3df6a5035fb7d71efbc872bb8876bd
-
SHA512
40bf14ca1452fa6afed86e26b245ffbf428781b61dd25d16bba503efd8d416c3aab5b0ee7cfbd0cc9df3b7461caeba0ff1196b260fe591e63984da85aeb27844
-
SSDEEP
24:bZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZz:n
Malware Config
Signatures
-
Opens file in notepad (likely ransom note) 1 IoCs
pid Process 776 NOTEPAD.EXE