Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    150s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    06/04/2024, 05:00

General

  • Target

    fd02b054a99e838255035d34dcc6edff62a66c86f298a9c19a6189a67362bb65.exe

  • Size

    63KB

  • MD5

    3738cf87611e54ab2ca6a04e707fa93d

  • SHA1

    5784fe68e5cd5b362b5e19bf30c870aaadf4cc67

  • SHA256

    fd02b054a99e838255035d34dcc6edff62a66c86f298a9c19a6189a67362bb65

  • SHA512

    71440e0a680398399caf21bc3a81a14fcfe65c6cded1bf37a22c9ccd665ee92b4fc45b9389dabfa6b36a4d5ee3d88df9878ed40c005b5443eab09404d88c3c74

  • SSDEEP

    1536:W7ZhA7pApH1d9oVLQthbqbY9oVLQthbq51Rn67jT:6e7WpP9oVLQthbYY9oVLQthbUG

Score
9/10

Malware Config

Signatures

  • Renames multiple (3573) files with added filename extension

    This suggests ransomware activity of encrypting all the files on the system.

  • Drops file in Program Files directory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\fd02b054a99e838255035d34dcc6edff62a66c86f298a9c19a6189a67362bb65.exe
    "C:\Users\Admin\AppData\Local\Temp\fd02b054a99e838255035d34dcc6edff62a66c86f298a9c19a6189a67362bb65.exe"
    1⤵
    • Drops file in Program Files directory
    PID:2512

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\$Recycle.Bin\S-1-5-21-3627615824-4061627003-3019543961-1000\desktop.ini.tmp

    Filesize

    64KB

    MD5

    13e18af26c57eb06927afed817de99d9

    SHA1

    8dfab3413d99f48089a6eef5cdfec08d12b0a4e5

    SHA256

    f0467f0fbecf1f92d3b5c9982e4a4b5227b6c44b4d21d1589f2becf0979fb530

    SHA512

    041a13ef1332e2a60793cab8ab70bea186fa33ff893bac3dd0e72419227c41560972fd2caafbd01590822fcecd3434a23a3be58256b920d872c2bfae2e197c98

  • C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\Office64WW.xml.tmp

    Filesize

    72KB

    MD5

    4b0744d0c255b475d4764f766bc2feab

    SHA1

    d0dd84bc3bd3db8e753979b1fbe124ee61f9e715

    SHA256

    96e9991d9320c6e65f43d789e924523ad48e8f7adea66a30c0a218d08201d381

    SHA512

    56ccbcf1768140eee435dcc9c686c06fd494c235791d942603040d914774b9fe2570665878ac2ba890cfbb5d9dcaee2a4a78dff821b4b735b9ca9005fbe7a55b