Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
1s -
max time network
54s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
09/04/2024, 11:47
Static task
static1
Behavioral task
behavioral1
Sample
Coffre-fort.lnk
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
Coffre-fort.lnk
Resource
win10v2004-20240226-en
General
-
Target
Coffre-fort.lnk
-
Size
1KB
-
MD5
291e820eebfaea2658e9c5dba71cd5fe
-
SHA1
1fc11380e4c722dfc8b8af955fb6e8ead1b04d6b
-
SHA256
6335bc59c5ed52ee867949eb789652bbb56781475919eb147acaf5f2bbffdf20
-
SHA512
877f5e2af76c6b3638ed797dd2815c61fe35f34b29c3b742fda534af624433bb85db2459b66ace631a16c30088979ed08b3a06e7999ed3e4167c332870467ab5
Malware Config
Signatures
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\Coffre-fort.lnk1⤵PID:1208
-
C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe"C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /url:"odopen://unlockVault/?accounttype=personal"2⤵PID:3920
-
C:\Users\Admin\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe"C:\Users\Admin\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe" /update /restart3⤵PID:1724
-
C:\Users\Admin\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exeC:\Users\Admin\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe /update /restart /peruser /childprocess /extractFilesWithLessThreadCount /renameReplaceOneDriveExe /renameReplaceODSUExe /removeNonCurrentVersions /enableODSUReportingMode4⤵PID:4896
-
-
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
10.1MB
MD57ac6780cd75cbd1fd127b847a3a77571
SHA1fbaf5665f2a73431d8269a616db867466f98ae15
SHA256f4314b467c07b5e64ae13b14573155f8880e2bf2279a44d8757301aaa2804dd9
SHA51232e69b25dfc562630a0bd02642d107b94b4a8ac64b271a5a96e7a0e041f37af95bce0b1f39c03b87fdc137d4d1656d05d605b337d89833873de0e2cf9d6cac42
-
Filesize
8.5MB
MD534d088a3e9799a3e103685f174ac7b12
SHA1c902a7acdaca0cb19f64dc03456c84c36bf0deb8
SHA25633ed2dd2e2a92ca316989cfabee219a46229540fc0c832fdf83068cac5b4b5bf
SHA512f4d58f928efa76951e848afd85996a3d6dcf6775cb7cc873485f9158a208514e982657ea6eec6c13441ac9cb1bd1d1ad093d4d99651352a044694319e48cc48a
-
Filesize
5.8MB
MD532d66b51b6203613aeb7e64e096c4a4f
SHA1cb7e22e7ce1584136da481d465a694a041b20df0
SHA256af2b5d3287b109fd3ffb4fd2f9904dd82cb5ef32b9a9d805026d70c5b605bb7f
SHA51224ab08d865dcf96cb6b3d21c6f7a86ac162a8be66869170b0402ef69b5536252d70ec35ad3d1a8bf8c65a630f06357e2ce14930368018cf33d9fab5dabeb7e5e
-
Filesize
4.2MB
MD55b403c69109ad50d3edede496ae02a65
SHA1abde32df91d69ff46163109b4ed1726d14437195
SHA256e1da330257c960ef0c83eea7a23f71f6725a335cdbc6922196a148d22b5fa363
SHA512da26c1b71e00e7b09b93547a4e2882d0da3d7b83462346bff9c74b232a448f9de7b10823d88937ea3c3767c00d6321000634db5ac2a7db317619839fb54a023c
-
Filesize
77B
MD584b8d8cebbdf68b863ed1c3a8484524a
SHA1eac7020f98182be7f978216a90c07248b9e61137
SHA256b70ac44eb0df762a9e02c223755fc9fbf4ba6796b31b0575c6dce05e993f2bb0
SHA5121c292bade8888f18725973bc30c82980d9b7735c51b83fa48a624bc36e2d19d0591c50a099844f827d2d5456c5c25bf0f163a95559fe8e1b4a2df2c25e974c27
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\O8VM10HV\PreSignInSettingsConfig[1].json
Filesize63KB
MD5e516a60bc980095e8d156b1a99ab5eee
SHA1238e243ffc12d4e012fd020c9822703109b987f6
SHA256543796a1b343b4ebc0285d89cb8eb70667ac7b513da37495e38003704e9d88d7
SHA5129b51e99ba20e9da56d1acc24a1cf9f9c9dbdeb742bec034e0ff2bc179a60f4aff249f40344f9ddd43229dcdefa1041940f65afb336d46c175ffeff725c638d58
-
Filesize
726B
MD553244e542ddf6d280a2b03e28f0646b7
SHA1d9925f810a95880c92974549deead18d56f19c37
SHA25636a6bd38a8a6f5a75b73caffae5ae66dfabcaefd83da65b493fa881ea8a64e7d
SHA5124aa71d92ea2c46df86565d97aac75395371d3e17877ab252a297b84dca2ab251d50aaffc62eab9961f0df48de6f12be04a1f4a2cbde75b9ae7bcce6eb5450c62
-
Filesize
1.6MB
MD568337698c511da9b593cb667281cb189
SHA13186a333fb5de7f6bb2efa72d1c9f0a991284e19
SHA256db6bbd02318d5818e2b2e312ffecb4813ddaeee97abfc2f04b0b6cfac6c9fdce
SHA5125271cc8ee9bcfac3811591a385c2375d99c6862204ead5a6c10b6a0ddbd02ff609cdb1bcb9a284da0e1703c74fe2885c6d5f5f161460fd3174b17c66d3288098