Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
150s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system -
submitted
14/10/2023, 17:49
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
NEAS.2e6665c92f06bb9dd9e66b6f2e37ab60.exe
Resource
win7-20230831-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
NEAS.2e6665c92f06bb9dd9e66b6f2e37ab60.exe
Resource
win10v2004-20230915-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
NEAS.2e6665c92f06bb9dd9e66b6f2e37ab60.exe
-
Size
51KB
-
MD5
2e6665c92f06bb9dd9e66b6f2e37ab60
-
SHA1
01fdda4ad547d6e832aaf488ee9bb19ec12047ea
-
SHA256
67580330dfc0ba07e4df3f00bcc652fc7658354998bfc71fbb04ac2972cc780e
-
SHA512
e3c9eb1621ef97dd0f2e2fc520d9bceb15526394da615f241806f1f467d8faaee9d7685575945fa3a3e18c1ef81b196619bea229264db24bd78141e3c402fc7f
-
SSDEEP
768:W7BlprpARFbho+//g2JWZRM0jvpJWZRM0jvp:W7ZrpApoYg2JWZRM0jvpJWZRM0jvp
Score
9/10
Malware Config
Signatures
-
Renames multiple (511) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
Drops file in Program Files directory 64 IoCs
description ioc Process File created C:\Program Files\7-Zip\Lang\fy.txt.tmp NEAS.2e6665c92f06bb9dd9e66b6f2e37ab60.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\en-US\tipresx.dll.mui.tmp NEAS.2e6665c92f06bb9dd9e66b6f2e37ab60.exe File created C:\Program Files\Java\jdk1.7.0_80\db\lib\derbyLocale_cs.jar.tmp NEAS.2e6665c92f06bb9dd9e66b6f2e37ab60.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\play-static.png.tmp NEAS.2e6665c92f06bb9dd9e66b6f2e37ab60.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\1047x576black.png.tmp NEAS.2e6665c92f06bb9dd9e66b6f2e37ab60.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\NavigationUp_SelectionSubpicture.png.tmp NEAS.2e6665c92f06bb9dd9e66b6f2e37ab60.exe File created C:\Program Files\Java\jdk1.7.0_80\bin\jli.dll.tmp NEAS.2e6665c92f06bb9dd9e66b6f2e37ab60.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\hwresslm.dat.tmp NEAS.2e6665c92f06bb9dd9e66b6f2e37ab60.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\ipshrv.xml.tmp NEAS.2e6665c92f06bb9dd9e66b6f2e37ab60.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\ipsnor.xml.tmp NEAS.2e6665c92f06bb9dd9e66b6f2e37ab60.exe File created C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS20\es-ES\MSTTSLoc.dll.mui.tmp NEAS.2e6665c92f06bb9dd9e66b6f2e37ab60.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\content-background.png.tmp NEAS.2e6665c92f06bb9dd9e66b6f2e37ab60.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\bin\jfxmedia.dll.tmp NEAS.2e6665c92f06bb9dd9e66b6f2e37ab60.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\es-ES\InputPersonalization.exe.mui.tmp NEAS.2e6665c92f06bb9dd9e66b6f2e37ab60.exe File created C:\Program Files\Common Files\Microsoft Shared\MSInfo\fr-FR\msinfo32.exe.mui.tmp NEAS.2e6665c92f06bb9dd9e66b6f2e37ab60.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\Passport.wmv.tmp NEAS.2e6665c92f06bb9dd9e66b6f2e37ab60.exe File created C:\Program Files\Common Files\System\msadc\ja-JP\msdaremr.dll.mui.tmp NEAS.2e6665c92f06bb9dd9e66b6f2e37ab60.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\button-overlay.png.tmp NEAS.2e6665c92f06bb9dd9e66b6f2e37ab60.exe File created C:\Program Files\Java\jdk1.7.0_80\db\lib\derbyLocale_es.jar.tmp NEAS.2e6665c92f06bb9dd9e66b6f2e37ab60.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\bin\jsdt.dll.tmp NEAS.2e6665c92f06bb9dd9e66b6f2e37ab60.exe File created C:\Program Files\7-Zip\Lang\gu.txt.tmp NEAS.2e6665c92f06bb9dd9e66b6f2e37ab60.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\symbols.xml.tmp NEAS.2e6665c92f06bb9dd9e66b6f2e37ab60.exe File created C:\Program Files\Common Files\Microsoft Shared\Stationery\Shades of Blue.htm.tmp NEAS.2e6665c92f06bb9dd9e66b6f2e37ab60.exe File created C:\Program Files\Java\jdk1.7.0_80\bin\javah.exe.tmp NEAS.2e6665c92f06bb9dd9e66b6f2e37ab60.exe File created C:\Program Files\Java\jdk1.7.0_80\include\win32\bridge\AccessBridgeCalls.h.tmp NEAS.2e6665c92f06bb9dd9e66b6f2e37ab60.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\16to9Squareframe_VideoInset.png.tmp NEAS.2e6665c92f06bb9dd9e66b6f2e37ab60.exe File created C:\Program Files\7-Zip\Lang\fa.txt.tmp NEAS.2e6665c92f06bb9dd9e66b6f2e37ab60.exe File created C:\Program Files\Common Files\Microsoft Shared\Stationery\Monet.jpg.tmp NEAS.2e6665c92f06bb9dd9e66b6f2e37ab60.exe File created C:\Program Files\Common Files\Microsoft Shared\Stationery\Wrinkled_Paper.gif.tmp NEAS.2e6665c92f06bb9dd9e66b6f2e37ab60.exe File created C:\Program Files\Common Files\System\Ole DB\ja-JP\sqlxmlx.rll.mui.tmp NEAS.2e6665c92f06bb9dd9e66b6f2e37ab60.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Notes_INTRO_BG_PAL.wmv.tmp NEAS.2e6665c92f06bb9dd9e66b6f2e37ab60.exe File created C:\Program Files\7-Zip\Lang\ug.txt.tmp NEAS.2e6665c92f06bb9dd9e66b6f2e37ab60.exe File created C:\Program Files\Common Files\System\ado\msado15.dll.tmp NEAS.2e6665c92f06bb9dd9e66b6f2e37ab60.exe File created C:\Program Files\Common Files\System\msadc\en-US\msaddsr.dll.mui.tmp NEAS.2e6665c92f06bb9dd9e66b6f2e37ab60.exe File created C:\Program Files\Common Files\System\msadc\es-ES\msdaremr.dll.mui.tmp NEAS.2e6665c92f06bb9dd9e66b6f2e37ab60.exe File created C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\th.pak.tmp NEAS.2e6665c92f06bb9dd9e66b6f2e37ab60.exe File created C:\Program Files\Common Files\Microsoft Shared\Filters\msgfilt.dll.tmp NEAS.2e6665c92f06bb9dd9e66b6f2e37ab60.exe File created C:\Program Files\Common Files\Microsoft Shared\VSTO\vstoee.dll.tmp NEAS.2e6665c92f06bb9dd9e66b6f2e37ab60.exe File created C:\Program Files\Common Files\System\msadc\de-DE\msadcer.dll.mui.tmp NEAS.2e6665c92f06bb9dd9e66b6f2e37ab60.exe File created C:\Program Files\Common Files\System\msadc\msadcf.dll.tmp NEAS.2e6665c92f06bb9dd9e66b6f2e37ab60.exe File created C:\Program Files\Common Files\System\Ole DB\oledbjvs.inc.tmp NEAS.2e6665c92f06bb9dd9e66b6f2e37ab60.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Stacking\720_480shadow.png.tmp NEAS.2e6665c92f06bb9dd9e66b6f2e37ab60.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\btn-back-static.png.tmp NEAS.2e6665c92f06bb9dd9e66b6f2e37ab60.exe File created C:\Program Files\Java\jdk1.7.0_80\bin\jabswitch.exe.tmp NEAS.2e6665c92f06bb9dd9e66b6f2e37ab60.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\symbols\symbase.xml.tmp NEAS.2e6665c92f06bb9dd9e66b6f2e37ab60.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\web.xml.tmp NEAS.2e6665c92f06bb9dd9e66b6f2e37ab60.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\hwrfrash.dat.tmp NEAS.2e6665c92f06bb9dd9e66b6f2e37ab60.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\bin\javaw.exe.tmp NEAS.2e6665c92f06bb9dd9e66b6f2e37ab60.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Scenes_INTRO_BG.wmv.tmp NEAS.2e6665c92f06bb9dd9e66b6f2e37ab60.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\fi-FI\tipresx.dll.mui.tmp NEAS.2e6665c92f06bb9dd9e66b6f2e37ab60.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\he-IL\tipresx.dll.mui.tmp NEAS.2e6665c92f06bb9dd9e66b6f2e37ab60.exe File created C:\Program Files\Common Files\System\Ole DB\sqloledb.rll.tmp NEAS.2e6665c92f06bb9dd9e66b6f2e37ab60.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\Passport_PAL.wmv.tmp NEAS.2e6665c92f06bb9dd9e66b6f2e37ab60.exe File created C:\Program Files\Google\Chrome\Application\106.0.5249.119\vulkan-1.dll.tmp NEAS.2e6665c92f06bb9dd9e66b6f2e37ab60.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\bin\javacpl.exe.tmp NEAS.2e6665c92f06bb9dd9e66b6f2e37ab60.exe File created C:\Program Files\Common Files\System\msadc\es-ES\msadcer.dll.mui.tmp NEAS.2e6665c92f06bb9dd9e66b6f2e37ab60.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-back-static.png.tmp NEAS.2e6665c92f06bb9dd9e66b6f2e37ab60.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\rollinghills.png.tmp NEAS.2e6665c92f06bb9dd9e66b6f2e37ab60.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\NavigationRight_SelectionSubpicture.png.tmp NEAS.2e6665c92f06bb9dd9e66b6f2e37ab60.exe File created C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\bg.pak.tmp NEAS.2e6665c92f06bb9dd9e66b6f2e37ab60.exe File created C:\Program Files\7-Zip\Lang\nb.txt.tmp NEAS.2e6665c92f06bb9dd9e66b6f2e37ab60.exe File created C:\Program Files\7-Zip\Lang\tt.txt.tmp NEAS.2e6665c92f06bb9dd9e66b6f2e37ab60.exe File created C:\Program Files\Common Files\Microsoft Shared\Stationery\Psychedelic.jpg.tmp NEAS.2e6665c92f06bb9dd9e66b6f2e37ab60.exe File created C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\de.pak.tmp NEAS.2e6665c92f06bb9dd9e66b6f2e37ab60.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
51KB
MD5fc3bfb13b9904975b3e935dd0fe7db78
SHA18b9195eae725abca696032569202dc2cbf7fd011
SHA256d124465f37cd870395c460af2bfd5523838bb1be33e597c42bc1298fce560fe1
SHA5120e0002442ee26076da712db26932a9c82583b92c0275b10d4469e9aa2ef3e91e734069dd2cc3ccd60889cf96ab0e438f79a87937529e3de933d27ea0cfd56a31
-
Filesize
60KB
MD5c0b89cf7a6a65667a23681401a5bd481
SHA1c71515fecde936b1025556cd897aa998da497d32
SHA2560029010ae5b25c7372d6aaf5b3182c6edc98bbf5d745a334b79d4a28c4d32824
SHA5125bd63e46055ab6de9612d76a766a59f8b4a5a4b11de35a27c017ea2760abe9c52c4ade1d2d62adaa7407fae3e95ac4abcc41b4b7201b242d92343a777763d089