Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

Cwmrecoilcheat.rar

windows10-2004-x64

7

cwmrecoilc...ME.txt

windows10-2004-x64

1

cwmrecoilc...gs.ini

windows10-2004-x64

1

cwmrecoilc...il.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    1346s
  • max time network
    1168s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    20/02/2024, 19:05

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    cwmrecoilcheat/README.txt

  • Size

    307B

  • MD5

    8843f5c779a9ad4e2c8a270a119089e4

  • SHA1

    85a45a8583d63b1397e133c98204492c4b5598ad

  • SHA256

    77c1077e71a97ea1707f53ee8788f7bcf74e3830aef23c81e1b1058280dbb66d

  • SHA512

    dbc3a99da3839d1133ba48831375b3d28825e2f5c4930711008a44299f551377ca5ed97050a5dcce32ad4f09503ddbb283b005d86cd4b125d32c3aec8dbe8242

Score
1/10

Malware Config

Signatures

  • Opens file in notepad (likely ransom note) 1 IoCs
    ransomware

Processes

  • C:\Windows\system32\NOTEPAD.EXE
    C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\cwmrecoilcheat\README.txt
    1⤵
    • Opens file in notepad (likely ransom note)
    PID:4172

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads