Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
150s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
24/04/2024, 15:41
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
487a2a20eed555be0074e819ebe77285587cfb759d9be6fffa7bbd69867b30bc.exe
Resource
win7-20240221-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
487a2a20eed555be0074e819ebe77285587cfb759d9be6fffa7bbd69867b30bc.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
487a2a20eed555be0074e819ebe77285587cfb759d9be6fffa7bbd69867b30bc.exe
-
Size
109KB
-
MD5
8e462bd8616c756a4700794428a6aa33
-
SHA1
64e713d01bc4bbe63b0017168aba4fc35654fd35
-
SHA256
487a2a20eed555be0074e819ebe77285587cfb759d9be6fffa7bbd69867b30bc
-
SHA512
cb4f0e0c59603f69b4f8d0e37983fe363b53db45d6badddec3b135d5a570bf6df1f5d01bf4c44172993c3ffd465a9e3239d03577700b6e548caea418ac5aea5f
-
SSDEEP
3072:6rWpcOPxPke+e3fFpsJOfFpsJbgE2GEJdwJd2hUhz:tFPxPke+eI2G2Oz
Score
9/10
Malware Config
Signatures
-
Renames multiple (658) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
Drops file in Program Files directory 64 IoCs
description ioc Process File created C:\Program Files\Common Files\Microsoft Shared\ink\fr-FR\TipBand.dll.mui.tmp 487a2a20eed555be0074e819ebe77285587cfb759d9be6fffa7bbd69867b30bc.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\NavigationUp_SelectionSubpicture.png.tmp 487a2a20eed555be0074e819ebe77285587cfb759d9be6fffa7bbd69867b30bc.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\rectangle_travel_Thumbnail.bmp.tmp 487a2a20eed555be0074e819ebe77285587cfb759d9be6fffa7bbd69867b30bc.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\passport.png.tmp 487a2a20eed555be0074e819ebe77285587cfb759d9be6fffa7bbd69867b30bc.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\bin\jp2launcher.exe.tmp 487a2a20eed555be0074e819ebe77285587cfb759d9be6fffa7bbd69867b30bc.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Africa\Maputo.tmp 487a2a20eed555be0074e819ebe77285587cfb759d9be6fffa7bbd69867b30bc.exe File created C:\Program Files\7-Zip\Lang\az.txt.tmp 487a2a20eed555be0074e819ebe77285587cfb759d9be6fffa7bbd69867b30bc.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\chapters-static.png.tmp 487a2a20eed555be0074e819ebe77285587cfb759d9be6fffa7bbd69867b30bc.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\title_trans_scene.wmv.tmp 487a2a20eed555be0074e819ebe77285587cfb759d9be6fffa7bbd69867b30bc.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\keypadbase.xml.tmp 487a2a20eed555be0074e819ebe77285587cfb759d9be6fffa7bbd69867b30bc.exe File created C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Csi.dll.tmp 487a2a20eed555be0074e819ebe77285587cfb759d9be6fffa7bbd69867b30bc.exe File created C:\Program Files\Common Files\System\msadc\it-IT\msaddsr.dll.mui.tmp 487a2a20eed555be0074e819ebe77285587cfb759d9be6fffa7bbd69867b30bc.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Scene_loop.wmv.tmp 487a2a20eed555be0074e819ebe77285587cfb759d9be6fffa7bbd69867b30bc.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-back-over-select.png.tmp 487a2a20eed555be0074e819ebe77285587cfb759d9be6fffa7bbd69867b30bc.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\fr-FR\FlickLearningWizard.exe.mui.tmp 487a2a20eed555be0074e819ebe77285587cfb759d9be6fffa7bbd69867b30bc.exe File created C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS20\it-IT\MSTTSLoc.dll.mui.tmp 487a2a20eed555be0074e819ebe77285587cfb759d9be6fffa7bbd69867b30bc.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyMainBackground_PAL.wmv.tmp 487a2a20eed555be0074e819ebe77285587cfb759d9be6fffa7bbd69867b30bc.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\OldAge\NavigationUp_ButtonGraphic.png.tmp 487a2a20eed555be0074e819ebe77285587cfb759d9be6fffa7bbd69867b30bc.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\images\cursors\cursors.properties.tmp 487a2a20eed555be0074e819ebe77285587cfb759d9be6fffa7bbd69867b30bc.exe File created C:\Program Files\7-Zip\Lang\gu.txt.tmp 487a2a20eed555be0074e819ebe77285587cfb759d9be6fffa7bbd69867b30bc.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\fr-FR\micaut.dll.mui.tmp 487a2a20eed555be0074e819ebe77285587cfb759d9be6fffa7bbd69867b30bc.exe File created C:\Program Files\Common Files\Microsoft Shared\Stationery\Bears.htm.tmp 487a2a20eed555be0074e819ebe77285587cfb759d9be6fffa7bbd69867b30bc.exe File created C:\Program Files\Common Files\System\Ole DB\de-DE\sqloledb.rll.mui.tmp 487a2a20eed555be0074e819ebe77285587cfb759d9be6fffa7bbd69867b30bc.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\TitleButtonIcon.png.tmp 487a2a20eed555be0074e819ebe77285587cfb759d9be6fffa7bbd69867b30bc.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\rectangle_glass_Thumbnail.bmp.tmp 487a2a20eed555be0074e819ebe77285587cfb759d9be6fffa7bbd69867b30bc.exe File created C:\Program Files\Internet Explorer\en-US\eula.rtf.tmp 487a2a20eed555be0074e819ebe77285587cfb759d9be6fffa7bbd69867b30bc.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\management-agent.jar.tmp 487a2a20eed555be0074e819ebe77285587cfb759d9be6fffa7bbd69867b30bc.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\fr-FR\InkWatson.exe.mui.tmp 487a2a20eed555be0074e819ebe77285587cfb759d9be6fffa7bbd69867b30bc.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Asuncion.tmp 487a2a20eed555be0074e819ebe77285587cfb759d9be6fffa7bbd69867b30bc.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\tr-TR\tipresx.dll.mui.tmp 487a2a20eed555be0074e819ebe77285587cfb759d9be6fffa7bbd69867b30bc.exe File created C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS20\ja-JP\MSTTSLoc.dll.mui.tmp 487a2a20eed555be0074e819ebe77285587cfb759d9be6fffa7bbd69867b30bc.exe File created C:\Program Files\Common Files\System\ado\msadomd.dll.tmp 487a2a20eed555be0074e819ebe77285587cfb759d9be6fffa7bbd69867b30bc.exe File created C:\Program Files\Common Files\System\ado\msadomd28.tlb.tmp 487a2a20eed555be0074e819ebe77285587cfb759d9be6fffa7bbd69867b30bc.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\16to9Squareframe_SelectionSubpicture.png.tmp 487a2a20eed555be0074e819ebe77285587cfb759d9be6fffa7bbd69867b30bc.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\Title_select-highlight.png.tmp 487a2a20eed555be0074e819ebe77285587cfb759d9be6fffa7bbd69867b30bc.exe File created C:\Program Files\Google\Chrome\Application\106.0.5249.119\VisualElements\SmallLogo.png.tmp 487a2a20eed555be0074e819ebe77285587cfb759d9be6fffa7bbd69867b30bc.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\ipscht.xml.tmp 487a2a20eed555be0074e819ebe77285587cfb759d9be6fffa7bbd69867b30bc.exe File created C:\Program Files\Java\jdk1.7.0_80\bin\orbd.exe.tmp 487a2a20eed555be0074e819ebe77285587cfb759d9be6fffa7bbd69867b30bc.exe File created C:\Program Files\Java\jdk1.7.0_80\db\lib\derby.jar.tmp 487a2a20eed555be0074e819ebe77285587cfb759d9be6fffa7bbd69867b30bc.exe File created C:\Program Files\Java\jdk1.7.0_80\bin\keytool.exe.tmp 487a2a20eed555be0074e819ebe77285587cfb759d9be6fffa7bbd69867b30bc.exe File created C:\Program Files\Common Files\System\msadc\fr-FR\msdaremr.dll.mui.tmp 487a2a20eed555be0074e819ebe77285587cfb759d9be6fffa7bbd69867b30bc.exe File created C:\Program Files\DVD Maker\SecretST.TTF.tmp 487a2a20eed555be0074e819ebe77285587cfb759d9be6fffa7bbd69867b30bc.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\OldAge\vintage.png.tmp 487a2a20eed555be0074e819ebe77285587cfb759d9be6fffa7bbd69867b30bc.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\NavigationUp_SelectionSubpicture.png.tmp 487a2a20eed555be0074e819ebe77285587cfb759d9be6fffa7bbd69867b30bc.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\passport_mask_left.png.tmp 487a2a20eed555be0074e819ebe77285587cfb759d9be6fffa7bbd69867b30bc.exe File created C:\Program Files\Internet Explorer\ieinstal.exe.tmp 487a2a20eed555be0074e819ebe77285587cfb759d9be6fffa7bbd69867b30bc.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\bin\unpack.dll.tmp 487a2a20eed555be0074e819ebe77285587cfb759d9be6fffa7bbd69867b30bc.exe File created C:\Program Files\Common Files\Microsoft Shared\Stationery\Garden.htm.tmp 487a2a20eed555be0074e819ebe77285587cfb759d9be6fffa7bbd69867b30bc.exe File created C:\Program Files\7-Zip\Lang\sv.txt.tmp 487a2a20eed555be0074e819ebe77285587cfb759d9be6fffa7bbd69867b30bc.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\en-US\IpsMigrationPlugin.dll.mui.tmp 487a2a20eed555be0074e819ebe77285587cfb759d9be6fffa7bbd69867b30bc.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\ipsnor.xml.tmp 487a2a20eed555be0074e819ebe77285587cfb759d9be6fffa7bbd69867b30bc.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\it-IT\mshwLatin.dll.mui.tmp 487a2a20eed555be0074e819ebe77285587cfb759d9be6fffa7bbd69867b30bc.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\ja-JP\InkObj.dll.mui.tmp 487a2a20eed555be0074e819ebe77285587cfb759d9be6fffa7bbd69867b30bc.exe File created C:\Program Files\Common Files\System\Ole DB\en-US\sqlxmlx.rll.mui.tmp 487a2a20eed555be0074e819ebe77285587cfb759d9be6fffa7bbd69867b30bc.exe File created C:\Program Files\Java\jdk1.7.0_80\bin\pack200.exe.tmp 487a2a20eed555be0074e819ebe77285587cfb759d9be6fffa7bbd69867b30bc.exe File created C:\Program Files\7-Zip\Lang\ne.txt.tmp 487a2a20eed555be0074e819ebe77285587cfb759d9be6fffa7bbd69867b30bc.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Africa\Monrovia.tmp 487a2a20eed555be0074e819ebe77285587cfb759d9be6fffa7bbd69867b30bc.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Argentina\Buenos_Aires.tmp 487a2a20eed555be0074e819ebe77285587cfb759d9be6fffa7bbd69867b30bc.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\classlist.tmp 487a2a20eed555be0074e819ebe77285587cfb759d9be6fffa7bbd69867b30bc.exe File created C:\Program Files\Common Files\Microsoft Shared\Stationery\Pine_Lumber.jpg.tmp 487a2a20eed555be0074e819ebe77285587cfb759d9be6fffa7bbd69867b30bc.exe File created C:\Program Files\Common Files\System\wab32.dll.tmp 487a2a20eed555be0074e819ebe77285587cfb759d9be6fffa7bbd69867b30bc.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\mainimage-mask.png.tmp 487a2a20eed555be0074e819ebe77285587cfb759d9be6fffa7bbd69867b30bc.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\circleround_glass.png.tmp 487a2a20eed555be0074e819ebe77285587cfb759d9be6fffa7bbd69867b30bc.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\NavigationLeft_SelectionSubpicture.png.tmp 487a2a20eed555be0074e819ebe77285587cfb759d9be6fffa7bbd69867b30bc.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
110KB
MD5492b8a225cc76c456f30a7cc0615ee0e
SHA1b4992caa81b4116696b4a38c4f19e737903f5367
SHA2567ee32fb98df8ba0c47e83c6e10ec7b6cd00af772a5993978742f4ab5026cf76f
SHA512e1684e66e360edeef989669715df09d9a574262a3d4a1f13345096f2647818d7e56e2c9580a80229928d83256d9046af3f6e3d59a3bdd7b1b70adc33031245b1
-
Filesize
119KB
MD5c216ef1f55455ce187acc1816a65658c
SHA1b36e22522d4d1990b7136e1e4a4345aad03bad63
SHA2563b44e61a338ce6a24fbe31bd460c703b6486b889de3fb48627acd015e2a2c01b
SHA512f055ce1cd38a85d47f90f06d7928e03dbb469c91bc64d193b9fbf3f878c054894eea257ec1ed3e3e6df703e5c3476dedc785ad141c3ab0410e705eb4748f0598