Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    1s
  • max time network
    54s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    09/04/2024, 11:47

General

  • Target

    Coffre-fort.lnk

  • Size

    1KB

  • MD5

    291e820eebfaea2658e9c5dba71cd5fe

  • SHA1

    1fc11380e4c722dfc8b8af955fb6e8ead1b04d6b

  • SHA256

    6335bc59c5ed52ee867949eb789652bbb56781475919eb147acaf5f2bbffdf20

  • SHA512

    877f5e2af76c6b3638ed797dd2815c61fe35f34b29c3b742fda534af624433bb85db2459b66ace631a16c30088979ed08b3a06e7999ed3e4167c332870467ab5

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\cmd.exe
    cmd /c C:\Users\Admin\AppData\Local\Temp\Coffre-fort.lnk
    1⤵
      PID:1208
      • C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe
        "C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /url:"odopen://unlockVault/?accounttype=personal"
        2⤵
          PID:3920
          • C:\Users\Admin\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe
            "C:\Users\Admin\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe" /update /restart
            3⤵
              PID:1724
              • C:\Users\Admin\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe
                C:\Users\Admin\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe /update /restart /peruser /childprocess /extractFilesWithLessThreadCount /renameReplaceOneDriveExe /renameReplaceODSUExe /removeNonCurrentVersions /enableODSUReportingMode
                4⤵
                  PID:4896

          Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • C:\Users\Admin\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe

            Filesize

            10.1MB

            MD5

            7ac6780cd75cbd1fd127b847a3a77571

            SHA1

            fbaf5665f2a73431d8269a616db867466f98ae15

            SHA256

            f4314b467c07b5e64ae13b14573155f8880e2bf2279a44d8757301aaa2804dd9

            SHA512

            32e69b25dfc562630a0bd02642d107b94b4a8ac64b271a5a96e7a0e041f37af95bce0b1f39c03b87fdc137d4d1656d05d605b337d89833873de0e2cf9d6cac42

          • C:\Users\Admin\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe

            Filesize

            8.5MB

            MD5

            34d088a3e9799a3e103685f174ac7b12

            SHA1

            c902a7acdaca0cb19f64dc03456c84c36bf0deb8

            SHA256

            33ed2dd2e2a92ca316989cfabee219a46229540fc0c832fdf83068cac5b4b5bf

            SHA512

            f4d58f928efa76951e848afd85996a3d6dcf6775cb7cc873485f9158a208514e982657ea6eec6c13441ac9cb1bd1d1ad093d4d99651352a044694319e48cc48a

          • C:\Users\Admin\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe

            Filesize

            5.8MB

            MD5

            32d66b51b6203613aeb7e64e096c4a4f

            SHA1

            cb7e22e7ce1584136da481d465a694a041b20df0

            SHA256

            af2b5d3287b109fd3ffb4fd2f9904dd82cb5ef32b9a9d805026d70c5b605bb7f

            SHA512

            24ab08d865dcf96cb6b3d21c6f7a86ac162a8be66869170b0402ef69b5536252d70ec35ad3d1a8bf8c65a630f06357e2ce14930368018cf33d9fab5dabeb7e5e

          • C:\Users\Admin\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe

            Filesize

            4.2MB

            MD5

            5b403c69109ad50d3edede496ae02a65

            SHA1

            abde32df91d69ff46163109b4ed1726d14437195

            SHA256

            e1da330257c960ef0c83eea7a23f71f6725a335cdbc6922196a148d22b5fa363

            SHA512

            da26c1b71e00e7b09b93547a4e2882d0da3d7b83462346bff9c74b232a448f9de7b10823d88937ea3c3767c00d6321000634db5ac2a7db317619839fb54a023c

          • C:\Users\Admin\AppData\Local\Microsoft\OneDrive\setup\logs\DeviceHealthSummaryConfiguration.ini

            Filesize

            77B

            MD5

            84b8d8cebbdf68b863ed1c3a8484524a

            SHA1

            eac7020f98182be7f978216a90c07248b9e61137

            SHA256

            b70ac44eb0df762a9e02c223755fc9fbf4ba6796b31b0575c6dce05e993f2bb0

            SHA512

            1c292bade8888f18725973bc30c82980d9b7735c51b83fa48a624bc36e2d19d0591c50a099844f827d2d5456c5c25bf0f163a95559fe8e1b4a2df2c25e974c27

          • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\O8VM10HV\PreSignInSettingsConfig[1].json

            Filesize

            63KB

            MD5

            e516a60bc980095e8d156b1a99ab5eee

            SHA1

            238e243ffc12d4e012fd020c9822703109b987f6

            SHA256

            543796a1b343b4ebc0285d89cb8eb70667ac7b513da37495e38003704e9d88d7

            SHA512

            9b51e99ba20e9da56d1acc24a1cf9f9c9dbdeb742bec034e0ff2bc179a60f4aff249f40344f9ddd43229dcdefa1041940f65afb336d46c175ffeff725c638d58

          • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\X0OFMNIL\update100[1].xml

            Filesize

            726B

            MD5

            53244e542ddf6d280a2b03e28f0646b7

            SHA1

            d9925f810a95880c92974549deead18d56f19c37

            SHA256

            36a6bd38a8a6f5a75b73caffae5ae66dfabcaefd83da65b493fa881ea8a64e7d

            SHA512

            4aa71d92ea2c46df86565d97aac75395371d3e17877ab252a297b84dca2ab251d50aaffc62eab9961f0df48de6f12be04a1f4a2cbde75b9ae7bcce6eb5450c62

          • C:\Users\Admin\AppData\Local\Temp\tmp6378.tmp

            Filesize

            1.6MB

            MD5

            68337698c511da9b593cb667281cb189

            SHA1

            3186a333fb5de7f6bb2efa72d1c9f0a991284e19

            SHA256

            db6bbd02318d5818e2b2e312ffecb4813ddaeee97abfc2f04b0b6cfac6c9fdce

            SHA512

            5271cc8ee9bcfac3811591a385c2375d99c6862204ead5a6c10b6a0ddbd02ff609cdb1bcb9a284da0e1703c74fe2885c6d5f5f161460fd3174b17c66d3288098