Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
150s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
21/05/2024, 02:44
Static task
static1
Behavioral task
behavioral1
Sample
ae383c0eff2978c7aef34372642dd9b2686faa02fd26ad15e670331ac57774bd.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
ae383c0eff2978c7aef34372642dd9b2686faa02fd26ad15e670331ac57774bd.exe
Resource
win10v2004-20240426-en
General
-
Target
ae383c0eff2978c7aef34372642dd9b2686faa02fd26ad15e670331ac57774bd.exe
-
Size
82KB
-
MD5
26606d61f06fc98850ac15be3b9d7c1a
-
SHA1
aac32d395a137e7fcdaca06ddd2eb09f3f1b15f5
-
SHA256
ae383c0eff2978c7aef34372642dd9b2686faa02fd26ad15e670331ac57774bd
-
SHA512
9499ff6aedcb4cc51d36ece24a9ea77560a7f90c58a7a9bcee39e4eb8ebaac3b403c3a7fa24010f69d442873b3d1c4d4cdb6b0d16d452f491211b97970f51a1e
-
SSDEEP
1536:W7ZhA7pApH1d9oVLQthbqbY9oVLQthbq51Rn6b+W+V76Rbu:6e7WpP9oVLQthbYY9oVLQthbUvF
Malware Config
Signatures
-
Renames multiple (3741) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
Drops file in Program Files directory 64 IoCs
description ioc Process File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\currency.data.tmp ae383c0eff2978c7aef34372642dd9b2686faa02fd26ad15e670331ac57774bd.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Antarctica\Mawson.tmp ae383c0eff2978c7aef34372642dd9b2686faa02fd26ad15e670331ac57774bd.exe File created C:\Program Files\Microsoft Games\Minesweeper\MineSweeper.exe.tmp ae383c0eff2978c7aef34372642dd9b2686faa02fd26ad15e670331ac57774bd.exe File created C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\it\PresentationBuildTasks.resources.dll.tmp ae383c0eff2978c7aef34372642dd9b2686faa02fd26ad15e670331ac57774bd.exe File created C:\Program Files\Windows Media Player\Network Sharing\wmpnss_color120.jpg.tmp ae383c0eff2978c7aef34372642dd9b2686faa02fd26ad15e670331ac57774bd.exe File created C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\images\triangle.png.tmp ae383c0eff2978c7aef34372642dd9b2686faa02fd26ad15e670331ac57774bd.exe File created C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\images\bg-today.png.tmp ae383c0eff2978c7aef34372642dd9b2686faa02fd26ad15e670331ac57774bd.exe File created C:\Program Files\7-Zip\Lang\id.txt.tmp ae383c0eff2978c7aef34372642dd9b2686faa02fd26ad15e670331ac57774bd.exe File created C:\Program Files\Internet Explorer\pdm.dll.tmp ae383c0eff2978c7aef34372642dd9b2686faa02fd26ad15e670331ac57774bd.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_zh_4.4.0.v20140623020002\feature.xml.tmp ae383c0eff2978c7aef34372642dd9b2686faa02fd26ad15e670331ac57774bd.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.ui_2.3.0.v20140404-1657.jar.tmp ae383c0eff2978c7aef34372642dd9b2686faa02fd26ad15e670331ac57774bd.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-templates.jar.tmp ae383c0eff2978c7aef34372642dd9b2686faa02fd26ad15e670331ac57774bd.exe File created C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\es\System.ServiceModel.Resources.dll.tmp ae383c0eff2978c7aef34372642dd9b2686faa02fd26ad15e670331ac57774bd.exe File created C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\es\UIAutomationClientsideProviders.resources.dll.tmp ae383c0eff2978c7aef34372642dd9b2686faa02fd26ad15e670331ac57774bd.exe File created C:\Program Files\7-Zip\Lang\az.txt.tmp ae383c0eff2978c7aef34372642dd9b2686faa02fd26ad15e670331ac57774bd.exe File created C:\Program Files\7-Zip\Lang\sr-spl.txt.tmp ae383c0eff2978c7aef34372642dd9b2686faa02fd26ad15e670331ac57774bd.exe File created C:\Program Files\Java\jre7\lib\zi\Indian\Chagos.tmp ae383c0eff2978c7aef34372642dd9b2686faa02fd26ad15e670331ac57774bd.exe File created C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\de-DE\gadget.xml.tmp ae383c0eff2978c7aef34372642dd9b2686faa02fd26ad15e670331ac57774bd.exe File created C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\fr-FR\js\slideShow.js.tmp ae383c0eff2978c7aef34372642dd9b2686faa02fd26ad15e670331ac57774bd.exe File created C:\Program Files\Mozilla Firefox\default-browser-agent.exe.tmp ae383c0eff2978c7aef34372642dd9b2686faa02fd26ad15e670331ac57774bd.exe File created C:\Program Files\Common Files\System\msadc\de-DE\msadcfr.dll.mui.tmp ae383c0eff2978c7aef34372642dd9b2686faa02fd26ad15e670331ac57774bd.exe File created C:\Program Files\Common Files\System\Ole DB\sqlxmlx.rll.tmp ae383c0eff2978c7aef34372642dd9b2686faa02fd26ad15e670331ac57774bd.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Postage_ButtonGraphic.png.tmp ae383c0eff2978c7aef34372642dd9b2686faa02fd26ad15e670331ac57774bd.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\deploy\messages.properties.tmp ae383c0eff2978c7aef34372642dd9b2686faa02fd26ad15e670331ac57774bd.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Chicago.tmp ae383c0eff2978c7aef34372642dd9b2686faa02fd26ad15e670331ac57774bd.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\com.jrockit.mc.feature.core_5.5.0.165303\feature.properties.tmp ae383c0eff2978c7aef34372642dd9b2686faa02fd26ad15e670331ac57774bd.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.swt_3.103.1.v20140903-1938.jar.tmp ae383c0eff2978c7aef34372642dd9b2686faa02fd26ad15e670331ac57774bd.exe File created C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\Providers\Proximity\11.00\brt04.hsp.tmp ae383c0eff2978c7aef34372642dd9b2686faa02fd26ad15e670331ac57774bd.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Title_Page_Ref_PAL.wmv.tmp ae383c0eff2978c7aef34372642dd9b2686faa02fd26ad15e670331ac57774bd.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Postage_SelectionSubpicture.png.tmp ae383c0eff2978c7aef34372642dd9b2686faa02fd26ad15e670331ac57774bd.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Shatter\shatter.png.tmp ae383c0eff2978c7aef34372642dd9b2686faa02fd26ad15e670331ac57774bd.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.p2.ui.overridden_5.5.0.165303.jar.tmp ae383c0eff2978c7aef34372642dd9b2686faa02fd26ad15e670331ac57774bd.exe File created C:\Program Files\Java\jre7\bin\deploy.dll.tmp ae383c0eff2978c7aef34372642dd9b2686faa02fd26ad15e670331ac57774bd.exe File created C:\Program Files\Java\jre7\lib\zi\America\Santiago.tmp ae383c0eff2978c7aef34372642dd9b2686faa02fd26ad15e670331ac57774bd.exe File created C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\es\PresentationCore.resources.dll.tmp ae383c0eff2978c7aef34372642dd9b2686faa02fd26ad15e670331ac57774bd.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\Panel_Mask.wmv.tmp ae383c0eff2978c7aef34372642dd9b2686faa02fd26ad15e670331ac57774bd.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Vignette\NavigationRight_SelectionSubpicture.png.tmp ae383c0eff2978c7aef34372642dd9b2686faa02fd26ad15e670331ac57774bd.exe File created C:\Program Files\VideoLAN\VLC\plugins\video_chroma\libi420_yuy2_mmx_plugin.dll.tmp ae383c0eff2978c7aef34372642dd9b2686faa02fd26ad15e670331ac57774bd.exe File created C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL.tmp ae383c0eff2978c7aef34372642dd9b2686faa02fd26ad15e670331ac57774bd.exe File created C:\Program Files\Java\jdk1.7.0_80\db\bin\sysinfo.bat.tmp ae383c0eff2978c7aef34372642dd9b2686faa02fd26ad15e670331ac57774bd.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Atlantic\Azores.tmp ae383c0eff2978c7aef34372642dd9b2686faa02fd26ad15e670331ac57774bd.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\plugin.properties.tmp ae383c0eff2978c7aef34372642dd9b2686faa02fd26ad15e670331ac57774bd.exe File created C:\Program Files\Java\jre7\lib\zi\America\Lima.tmp ae383c0eff2978c7aef34372642dd9b2686faa02fd26ad15e670331ac57774bd.exe File created C:\Program Files\Microsoft Games\FreeCell\de-DE\FreeCell.exe.mui.tmp ae383c0eff2978c7aef34372642dd9b2686faa02fd26ad15e670331ac57774bd.exe File created C:\Program Files\VideoLAN\VLC\lua\intf\dummy.luac.tmp ae383c0eff2978c7aef34372642dd9b2686faa02fd26ad15e670331ac57774bd.exe File created C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS20\en-US\MSTTSLoc.dll.mui.tmp ae383c0eff2978c7aef34372642dd9b2686faa02fd26ad15e670331ac57774bd.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\NavigationRight_SelectionSubpicture.png.tmp ae383c0eff2978c7aef34372642dd9b2686faa02fd26ad15e670331ac57774bd.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Grand_Turk.tmp ae383c0eff2978c7aef34372642dd9b2686faa02fd26ad15e670331ac57774bd.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\com.jrockit.mc.feature.console_5.5.0.165303\feature.properties.tmp ae383c0eff2978c7aef34372642dd9b2686faa02fd26ad15e670331ac57774bd.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.ql.nl_zh_4.4.0.v20140623020002.jar.tmp ae383c0eff2978c7aef34372642dd9b2686faa02fd26ad15e670331ac57774bd.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-options-keymap.xml.tmp ae383c0eff2978c7aef34372642dd9b2686faa02fd26ad15e670331ac57774bd.exe File created C:\Program Files\Microsoft Office\Office14\VISSHE.DLL.tmp ae383c0eff2978c7aef34372642dd9b2686faa02fd26ad15e670331ac57774bd.exe File created C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\images\prev_down.png.tmp ae383c0eff2978c7aef34372642dd9b2686faa02fd26ad15e670331ac57774bd.exe File created C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\17.png.tmp ae383c0eff2978c7aef34372642dd9b2686faa02fd26ad15e670331ac57774bd.exe File created C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\turnOnNotificationInTray.gif.tmp ae383c0eff2978c7aef34372642dd9b2686faa02fd26ad15e670331ac57774bd.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\NavigationUp_ButtonGraphic.png.tmp ae383c0eff2978c7aef34372642dd9b2686faa02fd26ad15e670331ac57774bd.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Hebron.tmp ae383c0eff2978c7aef34372642dd9b2686faa02fd26ad15e670331ac57774bd.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.transport.ecf.nl_ja_4.4.0.v20140623020002.jar.tmp ae383c0eff2978c7aef34372642dd9b2686faa02fd26ad15e670331ac57774bd.exe File created C:\Program Files\Java\jre7\lib\flavormap.properties.tmp ae383c0eff2978c7aef34372642dd9b2686faa02fd26ad15e670331ac57774bd.exe File created C:\Program Files\Java\jre7\lib\zi\Etc\UTC.tmp ae383c0eff2978c7aef34372642dd9b2686faa02fd26ad15e670331ac57774bd.exe File created C:\Program Files\Windows Media Player\es-ES\wmlaunch.exe.mui.tmp ae383c0eff2978c7aef34372642dd9b2686faa02fd26ad15e670331ac57774bd.exe File created C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\ja-JP\js\timeZones.js.tmp ae383c0eff2978c7aef34372642dd9b2686faa02fd26ad15e670331ac57774bd.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.garbagecollector.nl_zh_4.4.0.v20140623020002.jar.tmp ae383c0eff2978c7aef34372642dd9b2686faa02fd26ad15e670331ac57774bd.exe File created C:\Program Files\VideoLAN\VLC\plugins\codec\libddummy_plugin.dll.tmp ae383c0eff2978c7aef34372642dd9b2686faa02fd26ad15e670331ac57774bd.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
82KB
MD5f175dcab77841bdaa785880db15b2ba6
SHA1003d90227cfd0410140ecba4cc4e5c9fe59d1ea6
SHA256e7e5fff77aeb0b88cb06ec2e47b10e616732b21590fbf986583dc9ebba6d3e60
SHA512d75790af0365fe15238289965995a34a1f218a8d9c252302b315beaca2b3f41ce9d27b0ec1c365ceeb64a4e3dc14bfa3fc2b1ebbfb40d72fb4218bd1e0313647
-
Filesize
91KB
MD53ba237ffe9ce677cea09416ce87fd148
SHA15f66d38ee814e4a0c4e88613abea5b412a61625d
SHA256314006f050d3f692fc58dca65bc7788defb45a50e9dfac929d526b195094c249
SHA512e0768934302468869d58bc13c763f251c490b729fcb0561f281b86d8e81a7314e8354fbc9f1ace52cc5f534ef614b46b33a3d9762e1104338ff3a19d34c36f3d