Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

Cwmrecoilcheat.rar

windows10-2004-x64

7

cwmrecoilc...ME.txt

windows10-2004-x64

1

cwmrecoilc...gs.ini

windows10-2004-x64

1

cwmrecoilc...il.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    1356s
  • max time network
    1181s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240220-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240220-enlocale:en-usos:windows10-2004-x64system
  • submitted
    20/02/2024, 19:05

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    cwmrecoilcheat/settings.ini

  • Size

    508B

  • MD5

    e11b1e7d46795a31edf460ca3b858092

  • SHA1

    98e53c45e03fc36a17dd37ec17882cb59c857c3c

  • SHA256

    76b48d9ea162484c5ed4b07996931feaf8d2e17e6fbf781ee6b82b6e26880b33

  • SHA512

    f0b7f12eedb9137c4809573cf4de6ebd92dc692e27beab4c751a4b32b3597c0f82325b5a95cb6f4d2e23034ffdbf8e7297f65b0571493a791d076a2d29488a85

Score
1/10

Malware Config

Signatures

  • Opens file in notepad (likely ransom note) 1 IoCs
    ransomware

Processes

  • C:\Windows\system32\NOTEPAD.EXE
    C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\cwmrecoilcheat\settings.ini
    1⤵
    • Opens file in notepad (likely ransom note)
    PID:4880

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads