Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
135s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-es -
resource tags
arch:x64arch:x86image:win10v2004-20230220-eslocale:es-esos:windows10-2004-x64systemwindows -
submitted
18/05/2023, 17:22
Static task
static1
Behavioral task
behavioral1
Sample
KMS_Pico_Full_Setup.zip
Resource
win7-20230220-es
Behavioral task
behavioral2
Sample
KMS_Pico_Full_Setup.zip
Resource
win10v2004-20230220-es
Behavioral task
behavioral3
Sample
Password.txt
Resource
win7-20230220-es
Behavioral task
behavioral4
Sample
Password.txt
Resource
win10v2004-20230220-es
Behavioral task
behavioral5
Sample
Setup_File_KMS_Pico.exe
Resource
win7-20230220-es
Behavioral task
behavioral6
Sample
Setup_File_KMS_Pico.exe
Resource
win10v2004-20230220-es
General
-
Target
Password.txt
-
Size
18B
-
MD5
c44669219a77bcb6e04ccc9a7dc8905b
-
SHA1
cc10be56e2a5415ed3ed286734bee8f0741d92bd
-
SHA256
8406e6d1a644f797995907ec0a18d8104d1e8c5ffac8f4f874c11e5d92aff969
-
SHA512
2ea589c6612eaae6fdc3613df8438df4df92c76e39ba527f07477635d8e86ad4d473c941b77cadd3195cba4296ed3eb5d1f57c5b100279617b6a3399d880fbe2
Malware Config
Signatures
-
Opens file in notepad (likely ransom note) 1 IoCs
pid Process 2216 NOTEPAD.EXE