Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
33s -
max time network
36s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
03/04/2023, 16:20
Static task
static1
Behavioral task
behavioral1
Sample
Adobe After Effects 2020.lnk
Resource
win10v2004-20230220-en
1 signatures
150 seconds
General
-
Target
Adobe After Effects 2020.lnk
-
Size
1KB
-
MD5
80aed0cef237de0e63b36ea14c3260c3
-
SHA1
5635eb19464c3eb62c985015039983cd58c7108d
-
SHA256
74ddd438330eeae69f861b7a290849623a87c241d5178bd7179e656d108bc0d7
-
SHA512
7360063086ad66b20b4ebc7fe546073a542c6e9ef3df82bf1b2b238d71af11cfd3e6e23135cd4f57be8284c7e879ad06c27cdd404d11a6dd1b52ea08588ef6f1
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Windows\system32\cmd.execmd /c "C:\Users\Admin\AppData\Local\Temp\Adobe After Effects 2020.lnk"1⤵PID:4252
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:4572