Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
150s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20231023-en -
resource tags
arch:x64arch:x86image:win7-20231023-enlocale:en-usos:windows7-x64system -
submitted
02/11/2023, 02:09
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
74b683d2763f803625d16dfb74ce01c0.exe
Resource
win7-20231023-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
74b683d2763f803625d16dfb74ce01c0.exe
Resource
win10v2004-20231025-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
74b683d2763f803625d16dfb74ce01c0.exe
-
Size
49KB
-
MD5
74b683d2763f803625d16dfb74ce01c0
-
SHA1
7e6ce0948edad3ea79ed418ff26109d40cafc2af
-
SHA256
f2eb9ea40583c44de24e1bf50b51719a8ed0952f2170b66d0933fac6c461fc46
-
SHA512
6184c103a17a8697786eba827e899de46dbd3cae400091a3cac8c77276e3b96b37a69429b38c0c41543ffc61265c2fd43d9663d32a7afaf0cbb40a02b68de788
-
SSDEEP
384:GBt7Br5xjLvassAgA71FbhvgqHqQFLFupZr1pZriiowhniun5c5GW:W7Blp2sspARFbhJpupZ5pZrn5c5D
Score
9/10
Malware Config
Signatures
-
Renames multiple (1175) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
Drops file in Program Files directory 64 IoCs
description ioc Process File created C:\Program Files\Common Files\System\ja-JP\wab32res.dll.mui.tmp 74b683d2763f803625d16dfb74ce01c0.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\OldAge\NavigationUp_SelectionSubpicture.png.tmp 74b683d2763f803625d16dfb74ce01c0.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\SpecialNavigationRight_ButtonGraphic.png.tmp 74b683d2763f803625d16dfb74ce01c0.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.feature_3.9.0.v20140827-1444\license.html.tmp 74b683d2763f803625d16dfb74ce01c0.exe File created C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\th.pak.tmp 74b683d2763f803625d16dfb74ce01c0.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\management\jmxremote.password.template.tmp 74b683d2763f803625d16dfb74ce01c0.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Atikokan.tmp 74b683d2763f803625d16dfb74ce01c0.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Pangnirtung.tmp 74b683d2763f803625d16dfb74ce01c0.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT.tmp 74b683d2763f803625d16dfb74ce01c0.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\hwrenalm.dat.tmp 74b683d2763f803625d16dfb74ce01c0.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\Microsoft.Ink.dll.tmp 74b683d2763f803625d16dfb74ce01c0.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\META-INF\ECLIPSE_.SF.tmp 74b683d2763f803625d16dfb74ce01c0.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\ja-JP\micaut.dll.mui.tmp 74b683d2763f803625d16dfb74ce01c0.exe File created C:\Program Files\Common Files\Microsoft Shared\Stationery\Blue_Gradient.jpg.tmp 74b683d2763f803625d16dfb74ce01c0.exe File created C:\Program Files\Common Files\System\ado\msado21.tlb.tmp 74b683d2763f803625d16dfb74ce01c0.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainToNotesBackground_PAL.wmv.tmp 74b683d2763f803625d16dfb74ce01c0.exe File created C:\Program Files\Internet Explorer\sqmapi.dll.tmp 74b683d2763f803625d16dfb74ce01c0.exe File created C:\Program Files\Common Files\System\msadc\msdaremr.dll.tmp 74b683d2763f803625d16dfb74ce01c0.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\scenesscroll.png.tmp 74b683d2763f803625d16dfb74ce01c0.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\fonts\LucidaTypewriterRegular.ttf.tmp 74b683d2763f803625d16dfb74ce01c0.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Jamaica.tmp 74b683d2763f803625d16dfb74ce01c0.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\configuration\org.eclipse.equinox.simpleconfigurator\bundles.info.tmp 74b683d2763f803625d16dfb74ce01c0.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\hwrenclm.dat.tmp 74b683d2763f803625d16dfb74ce01c0.exe File created C:\Program Files\Common Files\Services\verisign.bmp.tmp 74b683d2763f803625d16dfb74ce01c0.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\feature.xml.tmp 74b683d2763f803625d16dfb74ce01c0.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\en-US\split.avi.tmp 74b683d2763f803625d16dfb74ce01c0.exe File created C:\Program Files\Google\Chrome\Application\106.0.5249.119\WidevineCdm\_platform_specific\win_x64\widevinecdm.dll.sig.tmp 74b683d2763f803625d16dfb74ce01c0.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.ssl.feature_1.0.0.v20140827-1444\META-INF\ECLIPSE_.RSA.tmp 74b683d2763f803625d16dfb74ce01c0.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\ko-kr.xml.tmp 74b683d2763f803625d16dfb74ce01c0.exe File created C:\Program Files\Common Files\System\msadc\en-US\msdaremr.dll.mui.tmp 74b683d2763f803625d16dfb74ce01c0.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Metlakatla.tmp 74b683d2763f803625d16dfb74ce01c0.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Bangkok.tmp 74b683d2763f803625d16dfb74ce01c0.exe File created C:\Program Files\7-Zip\Lang\nb.txt.tmp 74b683d2763f803625d16dfb74ce01c0.exe File created C:\Program Files\Common Files\Microsoft Shared\Filters\odffilt.dll.tmp 74b683d2763f803625d16dfb74ce01c0.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\NavigationLeft_ButtonGraphic.png.tmp 74b683d2763f803625d16dfb74ce01c0.exe File created C:\Program Files\Google\Chrome\Application\106.0.5249.119\default_apps\external_extensions.json.tmp 74b683d2763f803625d16dfb74ce01c0.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\ext\sunjce_provider.jar.tmp 74b683d2763f803625d16dfb74ce01c0.exe File created C:\Program Files\7-Zip\Lang\ku-ckb.txt.tmp 74b683d2763f803625d16dfb74ce01c0.exe File created C:\Program Files\Common Files\System\msadc\msdaprsr.dll.tmp 74b683d2763f803625d16dfb74ce01c0.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\NextMenuButtonIcon.png.tmp 74b683d2763f803625d16dfb74ce01c0.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Cayman.tmp 74b683d2763f803625d16dfb74ce01c0.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Chisinau.tmp 74b683d2763f803625d16dfb74ce01c0.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Gibraltar.tmp 74b683d2763f803625d16dfb74ce01c0.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Bougainville.tmp 74b683d2763f803625d16dfb74ce01c0.exe File created C:\Program Files\Common Files\System\ado\msado20.tlb.tmp 74b683d2763f803625d16dfb74ce01c0.exe File created C:\Program Files\Common Files\System\msadc\fr-FR\msaddsr.dll.mui.tmp 74b683d2763f803625d16dfb74ce01c0.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\1047x576_91n92.png.tmp 74b683d2763f803625d16dfb74ce01c0.exe File created C:\Program Files\Common Files\Microsoft Shared\Stationery\Tanspecks.jpg.tmp 74b683d2763f803625d16dfb74ce01c0.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\rectangle_scrapbook_Thumbnail.bmp.tmp 74b683d2763f803625d16dfb74ce01c0.exe File created C:\Program Files\Google\Chrome\Application\106.0.5249.119\resources.pak.tmp 74b683d2763f803625d16dfb74ce01c0.exe File created C:\Program Files\Java\jdk1.7.0_80\db\lib\derbyLocale_es.jar.tmp 74b683d2763f803625d16dfb74ce01c0.exe File created C:\Program Files\Java\jdk1.7.0_80\db\bin\stopNetworkServer.bat.tmp 74b683d2763f803625d16dfb74ce01c0.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\fr-FR\FlickLearningWizard.exe.mui.tmp 74b683d2763f803625d16dfb74ce01c0.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\NavigationUp_ButtonGraphic.png.tmp 74b683d2763f803625d16dfb74ce01c0.exe File created C:\Program Files\Internet Explorer\perfcore.dll.tmp 74b683d2763f803625d16dfb74ce01c0.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\el-GR\tipresx.dll.mui.tmp 74b683d2763f803625d16dfb74ce01c0.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\es-ES\tabskb.dll.mui.tmp 74b683d2763f803625d16dfb74ce01c0.exe File created C:\Program Files\Internet Explorer\pdm.dll.tmp 74b683d2763f803625d16dfb74ce01c0.exe File created C:\Program Files\Java\jdk1.7.0_80\db\bin\startNetworkServer.bat.tmp 74b683d2763f803625d16dfb74ce01c0.exe File created C:\Program Files\Java\jdk1.7.0_80\db\lib\derbyLocale_ja_JP.jar.tmp 74b683d2763f803625d16dfb74ce01c0.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\fonts\LucidaBrightDemiBold.ttf.tmp 74b683d2763f803625d16dfb74ce01c0.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\com.jrockit.mc.feature.core_5.5.0.165303\feature.properties.tmp 74b683d2763f803625d16dfb74ce01c0.exe File created C:\Program Files\Common Files\System\msadc\msaddsr.dll.tmp 74b683d2763f803625d16dfb74ce01c0.exe File created C:\Program Files\DVD Maker\de-DE\DVDMaker.exe.mui.tmp 74b683d2763f803625d16dfb74ce01c0.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
49KB
MD5df8957acc2aa9ded3482d748b0b14ffb
SHA14cb9f8d8bef39b8a15ab88089091cc196118e7a5
SHA2568c3b9715bf8be41bf6c45f311516df75334de99916ee9d215937da150ec6a038
SHA512660b10118fd7297470aff741b4a69f6c20fab55bc52e86d3629968148caac99b271ab82f9589f8dfad8723135ca81af420742b5e7f25d09c24ed9bf0e50d5f97
-
Filesize
58KB
MD52acfb34b0878bc8a48773df3c94e11d9
SHA1079dbf207e89fb86eb6ea1aca6cb22dd9fbf8348
SHA2569726573883f8effe2613435e56cea7ce8bb149fb91cd333564dabcb88ba3c42e
SHA51279883e721aa599c4c93f22ea61dd8a4db087c34d87fa612b4683a3d2cb8827e6e77b87b16bbc16afb4cb2e94033edf80487a0f4beafc8905c353ef3cbd0128f7