Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
150s -
max time network
117s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system -
submitted
01/05/2024, 19:41
Static task
static1
Behavioral task
behavioral1
Sample
245de1cbc22ea78f52ea44a311d928b9c34a6fccbb38d2ea77290f59b610fb29.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
245de1cbc22ea78f52ea44a311d928b9c34a6fccbb38d2ea77290f59b610fb29.exe
Resource
win10v2004-20240419-en
General
-
Target
245de1cbc22ea78f52ea44a311d928b9c34a6fccbb38d2ea77290f59b610fb29.exe
-
Size
91KB
-
MD5
676841f741fb337c08e8925536bb8a4c
-
SHA1
43d7a37fde60196ef198457d61e1b0ea992dbe3d
-
SHA256
245de1cbc22ea78f52ea44a311d928b9c34a6fccbb38d2ea77290f59b610fb29
-
SHA512
6fb2e1e083962b3a0b318364e5fdb56194d8a9dfe198cf1f5703c75b04301314ac94d088cd8540c4e129c6f10d78a93ab7ceefeaf8a1f18606fb4019b16ec417
-
SSDEEP
1536:W7ZrpApojOPG0PGQJwFJwkpe+eTDPfFpsJOfFpsJCAdCjHKP76i:6rWpcOPxPke+e3fFpsJOfFpsJbgEr
Malware Config
Signatures
-
Renames multiple (3541) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
Drops file in Program Files directory 64 IoCs
description ioc Process File created C:\Program Files\DVD Maker\Shared\DvdStyles\Push\push_item.png.tmp 245de1cbc22ea78f52ea44a311d928b9c34a6fccbb38d2ea77290f59b610fb29.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Cambridge_Bay.tmp 245de1cbc22ea78f52ea44a311d928b9c34a6fccbb38d2ea77290f59b610fb29.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Yakutat.tmp 245de1cbc22ea78f52ea44a311d928b9c34a6fccbb38d2ea77290f59b610fb29.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.help.nl_zh_4.4.0.v20140623020002.jar.tmp 245de1cbc22ea78f52ea44a311d928b9c34a6fccbb38d2ea77290f59b610fb29.exe File created C:\Program Files\Java\jre7\lib\zi\Asia\Thimphu.tmp 245de1cbc22ea78f52ea44a311d928b9c34a6fccbb38d2ea77290f59b610fb29.exe File created C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\ja\System.Net.Resources.dll.tmp 245de1cbc22ea78f52ea44a311d928b9c34a6fccbb38d2ea77290f59b610fb29.exe File created C:\Program Files\Windows Mail\it-IT\WinMail.exe.mui.tmp 245de1cbc22ea78f52ea44a311d928b9c34a6fccbb38d2ea77290f59b610fb29.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\scrapbook.png.tmp 245de1cbc22ea78f52ea44a311d928b9c34a6fccbb38d2ea77290f59b610fb29.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Palau.tmp 245de1cbc22ea78f52ea44a311d928b9c34a6fccbb38d2ea77290f59b610fb29.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\p2\org.eclipse.equinox.p2.core\cache\binary\org.eclipse.rcp_root_4.4.0.v20141007-2301.tmp 245de1cbc22ea78f52ea44a311d928b9c34a6fccbb38d2ea77290f59b610fb29.exe File created C:\Program Files\Java\jre7\lib\zi\Pacific\Majuro.tmp 245de1cbc22ea78f52ea44a311d928b9c34a6fccbb38d2ea77290f59b610fb29.exe File created C:\Program Files\Microsoft Games\Minesweeper\it-IT\Minesweeper.exe.mui.tmp 245de1cbc22ea78f52ea44a311d928b9c34a6fccbb38d2ea77290f59b610fb29.exe File created C:\Program Files\VideoLAN\VLC\skins\default.vlt.tmp 245de1cbc22ea78f52ea44a311d928b9c34a6fccbb38d2ea77290f59b610fb29.exe File created C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AXE8SharedExpat.dll.tmp 245de1cbc22ea78f52ea44a311d928b9c34a6fccbb38d2ea77290f59b610fb29.exe File created C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\ja-JP\currency.html.tmp 245de1cbc22ea78f52ea44a311d928b9c34a6fccbb38d2ea77290f59b610fb29.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_heb.xml.tmp 245de1cbc22ea78f52ea44a311d928b9c34a6fccbb38d2ea77290f59b610fb29.exe File created C:\Program Files\Common Files\System\msadc\it-IT\msadcfr.dll.mui.tmp 245de1cbc22ea78f52ea44a311d928b9c34a6fccbb38d2ea77290f59b610fb29.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.core.di_1.4.0.v20140414-1837.jar.tmp 245de1cbc22ea78f52ea44a311d928b9c34a6fccbb38d2ea77290f59b610fb29.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\about.html.tmp 245de1cbc22ea78f52ea44a311d928b9c34a6fccbb38d2ea77290f59b610fb29.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-host-views.xml.tmp 245de1cbc22ea78f52ea44a311d928b9c34a6fccbb38d2ea77290f59b610fb29.exe File created C:\Program Files\VideoLAN\VLC\locale\ta\LC_MESSAGES\vlc.mo.tmp 245de1cbc22ea78f52ea44a311d928b9c34a6fccbb38d2ea77290f59b610fb29.exe File created C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\images\curl.png.tmp 245de1cbc22ea78f52ea44a311d928b9c34a6fccbb38d2ea77290f59b610fb29.exe File created C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\VDKHome\ENU\acro20.lng.tmp 245de1cbc22ea78f52ea44a311d928b9c34a6fccbb38d2ea77290f59b610fb29.exe File created C:\Program Files\Common Files\System\msadc\es-ES\msdaprsr.dll.mui.tmp 245de1cbc22ea78f52ea44a311d928b9c34a6fccbb38d2ea77290f59b610fb29.exe File created C:\Program Files\Common Files\System\Ole DB\sqloledb.dll.tmp 245de1cbc22ea78f52ea44a311d928b9c34a6fccbb38d2ea77290f59b610fb29.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\images\cursors\win32_MoveDrop32x32.gif.tmp 245de1cbc22ea78f52ea44a311d928b9c34a6fccbb38d2ea77290f59b610fb29.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.swt.nl_zh_4.4.0.v20140623020002.jar.tmp 245de1cbc22ea78f52ea44a311d928b9c34a6fccbb38d2ea77290f59b610fb29.exe File created C:\Program Files\Java\jre7\bin\server\jvm.dll.tmp 245de1cbc22ea78f52ea44a311d928b9c34a6fccbb38d2ea77290f59b610fb29.exe File created C:\Program Files\Windows Photo Viewer\ja-JP\ImagingDevices.exe.mui.tmp 245de1cbc22ea78f52ea44a311d928b9c34a6fccbb38d2ea77290f59b610fb29.exe File created C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\diner_h.png.tmp 245de1cbc22ea78f52ea44a311d928b9c34a6fccbb38d2ea77290f59b610fb29.exe File created C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\DVA.api.tmp 245de1cbc22ea78f52ea44a311d928b9c34a6fccbb38d2ea77290f59b610fb29.exe File created C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_right_rest.png.tmp 245de1cbc22ea78f52ea44a311d928b9c34a6fccbb38d2ea77290f59b610fb29.exe File created C:\Program Files\Google\Chrome\Application\106.0.5249.119\v8_context_snapshot.bin.tmp 245de1cbc22ea78f52ea44a311d928b9c34a6fccbb38d2ea77290f59b610fb29.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\cmm\PYCC.pf.tmp 245de1cbc22ea78f52ea44a311d928b9c34a6fccbb38d2ea77290f59b610fb29.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Amman.tmp 245de1cbc22ea78f52ea44a311d928b9c34a6fccbb38d2ea77290f59b610fb29.exe File created C:\Program Files\Java\jre7\lib\zi\Europe\Moscow.tmp 245de1cbc22ea78f52ea44a311d928b9c34a6fccbb38d2ea77290f59b610fb29.exe File created C:\Program Files\VideoLAN\VLC\locale\ca\LC_MESSAGES\vlc.mo.tmp 245de1cbc22ea78f52ea44a311d928b9c34a6fccbb38d2ea77290f59b610fb29.exe File created C:\Program Files\Windows Media Player\de-DE\setup_wm.exe.mui.tmp 245de1cbc22ea78f52ea44a311d928b9c34a6fccbb38d2ea77290f59b610fb29.exe File created C:\Program Files\Windows Media Player\Media Renderer\connectionmanager_dmr.xml.tmp 245de1cbc22ea78f52ea44a311d928b9c34a6fccbb38d2ea77290f59b610fb29.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\es-ES\mshwLatin.dll.mui.tmp 245de1cbc22ea78f52ea44a311d928b9c34a6fccbb38d2ea77290f59b610fb29.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\ja-JP\FlickLearningWizard.exe.mui.tmp 245de1cbc22ea78f52ea44a311d928b9c34a6fccbb38d2ea77290f59b610fb29.exe File created C:\Program Files\Java\jdk1.7.0_80\db\bin\stopNetworkServer.bat.tmp 245de1cbc22ea78f52ea44a311d928b9c34a6fccbb38d2ea77290f59b610fb29.exe File created C:\Program Files\Microsoft Games\Hearts\de-DE\Hearts.exe.mui.tmp 245de1cbc22ea78f52ea44a311d928b9c34a6fccbb38d2ea77290f59b610fb29.exe File created C:\Program Files\Microsoft Games\Multiplayer\Spades\ja-JP\shvlzm.exe.mui.tmp 245de1cbc22ea78f52ea44a311d928b9c34a6fccbb38d2ea77290f59b610fb29.exe File created C:\Program Files\Windows Media Player\Network Sharing\wmpnss_bw32.jpg.tmp 245de1cbc22ea78f52ea44a311d928b9c34a6fccbb38d2ea77290f59b610fb29.exe File created C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_blue_sun.png.tmp 245de1cbc22ea78f52ea44a311d928b9c34a6fccbb38d2ea77290f59b610fb29.exe File created C:\Program Files\Windows Sidebar\it-IT\sbdrop.dll.mui.tmp 245de1cbc22ea78f52ea44a311d928b9c34a6fccbb38d2ea77290f59b610fb29.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\cs-CZ\tipresx.dll.mui.tmp 245de1cbc22ea78f52ea44a311d928b9c34a6fccbb38d2ea77290f59b610fb29.exe File created C:\Program Files\Internet Explorer\ielowutil.exe.tmp 245de1cbc22ea78f52ea44a311d928b9c34a6fccbb38d2ea77290f59b610fb29.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\jce.jar.tmp 245de1cbc22ea78f52ea44a311d928b9c34a6fccbb38d2ea77290f59b610fb29.exe File created C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\es\WindowsBase.resources.dll.tmp 245de1cbc22ea78f52ea44a311d928b9c34a6fccbb38d2ea77290f59b610fb29.exe File created C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.Data.Services.Design.dll.tmp 245de1cbc22ea78f52ea44a311d928b9c34a6fccbb38d2ea77290f59b610fb29.exe File created C:\Program Files\Windows Mail\en-US\msoeres.dll.mui.tmp 245de1cbc22ea78f52ea44a311d928b9c34a6fccbb38d2ea77290f59b610fb29.exe File created C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\15.png.tmp 245de1cbc22ea78f52ea44a311d928b9c34a6fccbb38d2ea77290f59b610fb29.exe File created C:\Program Files\Java\jre7\lib\zi\Australia\Darwin.tmp 245de1cbc22ea78f52ea44a311d928b9c34a6fccbb38d2ea77290f59b610fb29.exe File created C:\Program Files\VideoLAN\VLC\locale\mk\LC_MESSAGES\vlc.mo.tmp 245de1cbc22ea78f52ea44a311d928b9c34a6fccbb38d2ea77290f59b610fb29.exe File created C:\Program Files\Internet Explorer\ie9props.propdesc.tmp 245de1cbc22ea78f52ea44a311d928b9c34a6fccbb38d2ea77290f59b610fb29.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Irkutsk.tmp 245de1cbc22ea78f52ea44a311d928b9c34a6fccbb38d2ea77290f59b610fb29.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Karachi.tmp 245de1cbc22ea78f52ea44a311d928b9c34a6fccbb38d2ea77290f59b610fb29.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.jetty.security_8.1.14.v20131031.jar.tmp 245de1cbc22ea78f52ea44a311d928b9c34a6fccbb38d2ea77290f59b610fb29.exe File created C:\Program Files\VideoLAN\VLC\plugins\control\libwin_hotkeys_plugin.dll.tmp 245de1cbc22ea78f52ea44a311d928b9c34a6fccbb38d2ea77290f59b610fb29.exe File created C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_corner_top_right.png.tmp 245de1cbc22ea78f52ea44a311d928b9c34a6fccbb38d2ea77290f59b610fb29.exe File created C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_right_rest.png.tmp 245de1cbc22ea78f52ea44a311d928b9c34a6fccbb38d2ea77290f59b610fb29.exe File created C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Csi.dll.tmp 245de1cbc22ea78f52ea44a311d928b9c34a6fccbb38d2ea77290f59b610fb29.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
91KB
MD566a24ea3ba2c89ab602d02751f78beb6
SHA18963e07d464d9bea37488f53abf37e8ef4995c12
SHA256dac6c32041c1dd1b4e2dee604f07e0e819e1f6d98c9d38f659e527eb856562b9
SHA51261afa8d5b89e2f0cd1efd8c0feec7c375c8ff28c43e26ce20deaab94c2215e51a70bf1e8a5b2a2e282714f1fe01c27d12957a1f05e1f75948f2cb8e66448aa76
-
Filesize
100KB
MD52f15e3a05545b4694db21d5f4db45b12
SHA10f40402ac3f524a6f2902865730512a9a28c0f54
SHA2569234800859e968843213d26034221c769633351678ed8d523f9c447bb5062a6f
SHA512ebd651255f11670823d70d0e0223a3daf3bb23cdebe77930d0aefbfb51894431db4b06074aa97f98692d1f14c00a6dd858151c9512fd9cf477d3ce232d1c00f6