Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

7

condef/Def...gs.vbs

windows7-x64

3

condef/Def...gs.vbs

windows10-2004-x64

1

condef/ReadMe.txt

windows7-x64

1

condef/ReadMe.txt

windows10-2004-x64

1

condef/dControl.exe

windows7-x64

10

condef/dControl.exe

windows10-2004-x64

7

out.exe

windows7-x64

out.exe

windows10-2004-x64

condef/dControl.ini

windows7-x64

1

condef/dControl.ini

windows10-2004-x64

1

Analysis

  • max time kernel
    129s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231023-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01/11/2023, 02:03

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    condef/dControl.ini

  • Size

    85KB

  • MD5

    05450ff06366ae22654b63a6e27d1624

  • SHA1

    11453c370f41287fb6339e509bb9d3c91842b379

  • SHA256

    8e9a84da243905685ca77b6ef71841e610b88b7963d4de59f6dcbdd1621ecacd

  • SHA512

    ee0a9605b566aa89c8c9b260e1d9c15aecbd6cddc2df47fe24ef2cafbe8923b3e025bd5cd3d34499292589a3c094dd796ab4560c8099bad2051a54928c37b4b2

  • SSDEEP

    768:i/G+NmPfjsxaxdk2akexodULxEQq1wIgC+AEbSr6:1+NyjsxkKdkJdULgbWSO

Score
1/10

Malware Config

Signatures

  • Opens file in notepad (likely ransom note) 1 IoCs
    ransomware

Processes

  • C:\Windows\system32\NOTEPAD.EXE
    C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\condef\dControl.ini
    1⤵
    • Opens file in notepad (likely ransom note)
    PID:4956

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads