Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
114s -
max time network
135s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
31/12/2023, 13:35
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
f310f134416bf943b5c0e0ba69bdf999.exe
Resource
win7-20231215-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
f310f134416bf943b5c0e0ba69bdf999.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
f310f134416bf943b5c0e0ba69bdf999.exe
-
Size
82KB
-
MD5
f310f134416bf943b5c0e0ba69bdf999
-
SHA1
dc36c06540b0219ef9a10090d3e19474b7bf00e4
-
SHA256
1bf43da21dbf81a7cddcc352c18f0601a1d86d594ae392c3c3718aabde114c92
-
SHA512
78ebda6a700e2e96cdf4389ae8394748edf878f644ad0ada26aa855d54b138b4f064f72d93281a529d3a23d66078825402e3cc434d0accb5fe3ad5eb4d3f471a
-
SSDEEP
1536:W7Z2sspApkZrZnZrZHZrZ1iqktYtlXGkR2SfXGkR2StJls:62ssWpQXGkR2SfXGkR2StJls
Score
9/10
Malware Config
Signatures
-
Renames multiple (147) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
Drops file in Program Files directory 63 IoCs
description ioc Process File created C:\Program Files\7-Zip\Lang\gl.txt.tmp f310f134416bf943b5c0e0ba69bdf999.exe File created C:\Program Files\7-Zip\Lang\he.txt.tmp f310f134416bf943b5c0e0ba69bdf999.exe File created C:\Program Files\7-Zip\Lang\ka.txt.tmp f310f134416bf943b5c0e0ba69bdf999.exe File created C:\Program Files\7-Zip\Lang\ko.txt.tmp f310f134416bf943b5c0e0ba69bdf999.exe File created C:\Program Files\7-Zip\Lang\ku.txt.tmp f310f134416bf943b5c0e0ba69bdf999.exe File created C:\Program Files\7-Zip\descript.ion.tmp f310f134416bf943b5c0e0ba69bdf999.exe File created C:\Program Files\7-Zip\Lang\ar.txt.tmp f310f134416bf943b5c0e0ba69bdf999.exe File created C:\Program Files\7-Zip\Lang\hy.txt.tmp f310f134416bf943b5c0e0ba69bdf999.exe File created C:\Program Files\7-Zip\Lang\ky.txt.tmp f310f134416bf943b5c0e0ba69bdf999.exe File created C:\Program Files\7-Zip\Lang\en.ttt.tmp f310f134416bf943b5c0e0ba69bdf999.exe File created C:\Program Files\7-Zip\Lang\eu.txt.tmp f310f134416bf943b5c0e0ba69bdf999.exe File created C:\Program Files\7-Zip\Lang\io.txt.tmp f310f134416bf943b5c0e0ba69bdf999.exe File created C:\Program Files\7-Zip\7-zip.dll.tmp f310f134416bf943b5c0e0ba69bdf999.exe File created C:\Program Files\7-Zip\Lang\el.txt.tmp f310f134416bf943b5c0e0ba69bdf999.exe File created C:\Program Files\7-Zip\Lang\fi.txt.tmp f310f134416bf943b5c0e0ba69bdf999.exe File created C:\Program Files\7-Zip\Lang\is.txt.tmp f310f134416bf943b5c0e0ba69bdf999.exe File created C:\Program Files\7-Zip\Lang\ku-ckb.txt.tmp f310f134416bf943b5c0e0ba69bdf999.exe File created C:\Program Files\7-Zip\7-zip.chm.tmp f310f134416bf943b5c0e0ba69bdf999.exe File created C:\Program Files\7-Zip\History.txt.tmp f310f134416bf943b5c0e0ba69bdf999.exe File created C:\Program Files\7-Zip\Lang\an.txt.tmp f310f134416bf943b5c0e0ba69bdf999.exe File created C:\Program Files\7-Zip\Lang\cy.txt.tmp f310f134416bf943b5c0e0ba69bdf999.exe File created C:\Program Files\7-Zip\Lang\et.txt.tmp f310f134416bf943b5c0e0ba69bdf999.exe File created C:\Program Files\7-Zip\Lang\gu.txt.tmp f310f134416bf943b5c0e0ba69bdf999.exe File created C:\Program Files\7-Zip\Lang\lt.txt.tmp f310f134416bf943b5c0e0ba69bdf999.exe File created C:\Program Files\7-Zip\Lang\kab.txt.tmp f310f134416bf943b5c0e0ba69bdf999.exe File created C:\Program Files\7-Zip\Lang\fr.txt.tmp f310f134416bf943b5c0e0ba69bdf999.exe File created C:\Program Files\7-Zip\Lang\hu.txt.tmp f310f134416bf943b5c0e0ba69bdf999.exe File created C:\Program Files\7-Zip\7z.sfx.tmp f310f134416bf943b5c0e0ba69bdf999.exe File created C:\Program Files\7-Zip\Lang\bn.txt.tmp f310f134416bf943b5c0e0ba69bdf999.exe File created C:\Program Files\7-Zip\Lang\fa.txt.tmp f310f134416bf943b5c0e0ba69bdf999.exe File created C:\Program Files\7-Zip\7zCon.sfx.tmp f310f134416bf943b5c0e0ba69bdf999.exe File created C:\Program Files\7-Zip\Lang\af.txt.tmp f310f134416bf943b5c0e0ba69bdf999.exe File created C:\Program Files\7-Zip\Lang\fy.txt.tmp f310f134416bf943b5c0e0ba69bdf999.exe File created C:\Program Files\7-Zip\Lang\ga.txt.tmp f310f134416bf943b5c0e0ba69bdf999.exe File created C:\Program Files\7-Zip\Lang\id.txt.tmp f310f134416bf943b5c0e0ba69bdf999.exe File created C:\Program Files\7-Zip\Lang\it.txt.tmp f310f134416bf943b5c0e0ba69bdf999.exe File created C:\Program Files\7-Zip\7zFM.exe.tmp f310f134416bf943b5c0e0ba69bdf999.exe File created C:\Program Files\7-Zip\Lang\ast.txt.tmp f310f134416bf943b5c0e0ba69bdf999.exe File created C:\Program Files\7-Zip\Lang\br.txt.tmp f310f134416bf943b5c0e0ba69bdf999.exe File created C:\Program Files\7-Zip\Lang\kaa.txt.tmp f310f134416bf943b5c0e0ba69bdf999.exe File created C:\Program Files\7-Zip\Lang\lv.txt.tmp f310f134416bf943b5c0e0ba69bdf999.exe File created C:\Program Files\7-Zip\7zG.exe.tmp f310f134416bf943b5c0e0ba69bdf999.exe File created C:\Program Files\7-Zip\Lang\be.txt.tmp f310f134416bf943b5c0e0ba69bdf999.exe File created C:\Program Files\7-Zip\Lang\lij.txt.tmp f310f134416bf943b5c0e0ba69bdf999.exe File created C:\Program Files\7-Zip\7z.exe.tmp f310f134416bf943b5c0e0ba69bdf999.exe File created C:\Program Files\7-Zip\Lang\az.txt.tmp f310f134416bf943b5c0e0ba69bdf999.exe File created C:\Program Files\7-Zip\Lang\ba.txt.tmp f310f134416bf943b5c0e0ba69bdf999.exe File created C:\Program Files\7-Zip\Lang\eo.txt.tmp f310f134416bf943b5c0e0ba69bdf999.exe File created C:\Program Files\7-Zip\Lang\bg.txt.tmp f310f134416bf943b5c0e0ba69bdf999.exe File created C:\Program Files\7-Zip\Lang\co.txt.tmp f310f134416bf943b5c0e0ba69bdf999.exe File created C:\Program Files\7-Zip\Lang\da.txt.tmp f310f134416bf943b5c0e0ba69bdf999.exe File created C:\Program Files\7-Zip\Lang\de.txt.tmp f310f134416bf943b5c0e0ba69bdf999.exe File created C:\Program Files\7-Zip\Lang\es.txt.tmp f310f134416bf943b5c0e0ba69bdf999.exe File created C:\Program Files\7-Zip\7-zip32.dll.tmp f310f134416bf943b5c0e0ba69bdf999.exe File created C:\Program Files\7-Zip\7z.dll.tmp f310f134416bf943b5c0e0ba69bdf999.exe File created C:\Program Files\7-Zip\Lang\ca.txt.tmp f310f134416bf943b5c0e0ba69bdf999.exe File created C:\Program Files\7-Zip\Lang\cs.txt.tmp f310f134416bf943b5c0e0ba69bdf999.exe File created C:\Program Files\7-Zip\Lang\ext.txt.tmp f310f134416bf943b5c0e0ba69bdf999.exe File created C:\Program Files\7-Zip\Lang\fur.txt.tmp f310f134416bf943b5c0e0ba69bdf999.exe File created C:\Program Files\7-Zip\Lang\hi.txt.tmp f310f134416bf943b5c0e0ba69bdf999.exe File created C:\Program Files\7-Zip\Lang\hr.txt.tmp f310f134416bf943b5c0e0ba69bdf999.exe File created C:\Program Files\7-Zip\Lang\ja.txt.tmp f310f134416bf943b5c0e0ba69bdf999.exe File created C:\Program Files\7-Zip\Lang\kk.txt.tmp f310f134416bf943b5c0e0ba69bdf999.exe