Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    150s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    18/04/2024, 21:35

General

  • Target

    4c7ef0d301d9e8a37cfdc4901680b271c1260db0c4c23339912103f10cb37179.exe

  • Size

    92KB

  • MD5

    d11bdc6c66fff44d794f6fe9400fba8e

  • SHA1

    d35b8e17c569acffda4db65b8e89f7ac01516470

  • SHA256

    4c7ef0d301d9e8a37cfdc4901680b271c1260db0c4c23339912103f10cb37179

  • SHA512

    d2e7dfe82b3928a80969ff45282e350ec80629ea00df0afb43efe9411f4aaf22dc46e45ad3dbbee627986d5ae7a96c28a11e728a489e8e6ca574f917339dc979

  • SSDEEP

    1536:W7ZrpApojOPG0PGQJwFJwkpe+eTDPfFpsJOfFpsJCAdCjHKPNw:6rWpcOPxPke+e3fFpsJOfFpsJbgEK

Score
9/10

Malware Config

Signatures

  • Renames multiple (3550) files with added filename extension

    This suggests ransomware activity of encrypting all the files on the system.

  • Drops file in Program Files directory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\4c7ef0d301d9e8a37cfdc4901680b271c1260db0c4c23339912103f10cb37179.exe
    "C:\Users\Admin\AppData\Local\Temp\4c7ef0d301d9e8a37cfdc4901680b271c1260db0c4c23339912103f10cb37179.exe"
    1⤵
    • Drops file in Program Files directory
    PID:2348

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\$Recycle.Bin\S-1-5-21-2721934792-624042501-2768869379-1000\desktop.ini.tmp

    Filesize

    93KB

    MD5

    a3e74d82fcb0246c76f9de4687fa05bc

    SHA1

    d909b290353dade60872d05293dd32114c73bdb4

    SHA256

    28b2c9a1386417f9a9c24c9df34ada9ca1e37aaf279625df393e18c84daaed6d

    SHA512

    8d39791bb9b4bf00be93fba18885d049b1f69afaa589a22f478116c2c726dbec38cb30c6b7882e8c5d37ca0a080531f1bf9197359954c9b38b4f7de9b20f0815

  • C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\Office64WW.xml.tmp

    Filesize

    101KB

    MD5

    98aaf14b993c52a96d1018211c0053cd

    SHA1

    9264acf39d6face9923d4d906cd227d654ca2587

    SHA256

    11def79ea8df3f403974e28073bbf68aebca8e3292afdd4d090cb880c82d9aba

    SHA512

    5edde0df765275e8dcc508c1e86be7379fe731b3357c5d24e75f9529dffc461926385ba380bcbe33b088712efc48ecaa6dd61a659bb4867000e2d96356176698