Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
150s -
max time network
117s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
23/05/2024, 21:31
Static task
static1
Behavioral task
behavioral1
Sample
8e62cfe81e9575b022e4be9e6700f4ddda34dc188bd4748fbe7aa71fdd94f040.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
8e62cfe81e9575b022e4be9e6700f4ddda34dc188bd4748fbe7aa71fdd94f040.exe
Resource
win10v2004-20240426-en
General
-
Target
8e62cfe81e9575b022e4be9e6700f4ddda34dc188bd4748fbe7aa71fdd94f040.exe
-
Size
127KB
-
MD5
23764683435cf68006fbafa752d84c20
-
SHA1
5067ea4e06c2c86825b0dbd692bd4adfd86083b7
-
SHA256
8e62cfe81e9575b022e4be9e6700f4ddda34dc188bd4748fbe7aa71fdd94f040
-
SHA512
d72b5235c53395b4cc7ead72597162a91d08377ca4c7c7661fea406c620ead42decfe2334fdd28d731facea2b60d6269a38927a8dda71c80193ce04bb12aa261
-
SSDEEP
3072:6e7WpHIyRF9ESWu0SWuDmhSauvEKxVTLJtxoVz8FUDrYYaCusjdEKxVTLJtxoVz0:RqlIyFESWu0SWuGSwxP
Malware Config
Signatures
-
Renames multiple (3449) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
Drops file in Program Files directory 64 IoCs
description ioc Process File created C:\Program Files\DVD Maker\Shared\DvdStyles\4to3Squareframe_VideoInset.png.tmp 8e62cfe81e9575b022e4be9e6700f4ddda34dc188bd4748fbe7aa71fdd94f040.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\feedback.gif.tmp 8e62cfe81e9575b022e4be9e6700f4ddda34dc188bd4748fbe7aa71fdd94f040.exe File created C:\Program Files\Java\jre7\lib\zi\Europe\Paris.tmp 8e62cfe81e9575b022e4be9e6700f4ddda34dc188bd4748fbe7aa71fdd94f040.exe File created C:\Program Files\VideoLAN\VLC\plugins\demux\libogg_plugin.dll.tmp 8e62cfe81e9575b022e4be9e6700f4ddda34dc188bd4748fbe7aa71fdd94f040.exe File created C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS20\es-ES\MSTTSLoc.dll.mui.tmp 8e62cfe81e9575b022e4be9e6700f4ddda34dc188bd4748fbe7aa71fdd94f040.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT-6.tmp 8e62cfe81e9575b022e4be9e6700f4ddda34dc188bd4748fbe7aa71fdd94f040.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\p2\org.eclipse.equinox.p2.core\cache\binary\com.jrockit.mc.rcp.product_root_5.5.0.165303.tmp 8e62cfe81e9575b022e4be9e6700f4ddda34dc188bd4748fbe7aa71fdd94f040.exe File created C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\it\PresentationBuildTasks.resources.dll.tmp 8e62cfe81e9575b022e4be9e6700f4ddda34dc188bd4748fbe7aa71fdd94f040.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\config\Modules\org-netbeans-lib-profiler.xml.tmp 8e62cfe81e9575b022e4be9e6700f4ddda34dc188bd4748fbe7aa71fdd94f040.exe File created C:\Program Files\Java\jre7\lib\zi\Asia\Tehran.tmp 8e62cfe81e9575b022e4be9e6700f4ddda34dc188bd4748fbe7aa71fdd94f040.exe File created C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\it\System.ServiceModel.Resources.dll.tmp 8e62cfe81e9575b022e4be9e6700f4ddda34dc188bd4748fbe7aa71fdd94f040.exe File created C:\Program Files\VideoLAN\VLC\locale\cy\LC_MESSAGES\vlc.mo.tmp 8e62cfe81e9575b022e4be9e6700f4ddda34dc188bd4748fbe7aa71fdd94f040.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-split.avi.tmp 8e62cfe81e9575b022e4be9e6700f4ddda34dc188bd4748fbe7aa71fdd94f040.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\tpcps.dll.tmp 8e62cfe81e9575b022e4be9e6700f4ddda34dc188bd4748fbe7aa71fdd94f040.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\META-INF\MANIFEST.MF.tmp 8e62cfe81e9575b022e4be9e6700f4ddda34dc188bd4748fbe7aa71fdd94f040.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.browser_5.5.0.165303.jar.tmp 8e62cfe81e9575b022e4be9e6700f4ddda34dc188bd4748fbe7aa71fdd94f040.exe File created C:\Program Files\Java\jre7\lib\zi\Asia\Baku.tmp 8e62cfe81e9575b022e4be9e6700f4ddda34dc188bd4748fbe7aa71fdd94f040.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Galapagos.tmp 8e62cfe81e9575b022e4be9e6700f4ddda34dc188bd4748fbe7aa71fdd94f040.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-io_ja.jar.tmp 8e62cfe81e9575b022e4be9e6700f4ddda34dc188bd4748fbe7aa71fdd94f040.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-windows_ja.jar.tmp 8e62cfe81e9575b022e4be9e6700f4ddda34dc188bd4748fbe7aa71fdd94f040.exe File created C:\Program Files\Java\jre7\lib\zi\America\Porto_Velho.tmp 8e62cfe81e9575b022e4be9e6700f4ddda34dc188bd4748fbe7aa71fdd94f040.exe File created C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\ja\PresentationFramework.resources.dll.tmp 8e62cfe81e9575b022e4be9e6700f4ddda34dc188bd4748fbe7aa71fdd94f040.exe File created C:\Program Files\VideoLAN\VLC\locale\am\LC_MESSAGES\vlc.mo.tmp 8e62cfe81e9575b022e4be9e6700f4ddda34dc188bd4748fbe7aa71fdd94f040.exe File created C:\Program Files\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-icons_ffd27a_256x240.png.tmp 8e62cfe81e9575b022e4be9e6700f4ddda34dc188bd4748fbe7aa71fdd94f040.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Santo_Domingo.tmp 8e62cfe81e9575b022e4be9e6700f4ddda34dc188bd4748fbe7aa71fdd94f040.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Thimphu.tmp 8e62cfe81e9575b022e4be9e6700f4ddda34dc188bd4748fbe7aa71fdd94f040.exe File created C:\Program Files\Java\jre7\lib\zi\America\Antigua.tmp 8e62cfe81e9575b022e4be9e6700f4ddda34dc188bd4748fbe7aa71fdd94f040.exe File created C:\Program Files\Microsoft Games\SpiderSolitaire\SpiderSolitaire.exe.tmp 8e62cfe81e9575b022e4be9e6700f4ddda34dc188bd4748fbe7aa71fdd94f040.exe File created C:\Program Files\VideoLAN\VLC\plugins\services_discovery\libwindrive_plugin.dll.tmp 8e62cfe81e9575b022e4be9e6700f4ddda34dc188bd4748fbe7aa71fdd94f040.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.css.core.nl_ja_4.4.0.v20140623020002.jar.tmp 8e62cfe81e9575b022e4be9e6700f4ddda34dc188bd4748fbe7aa71fdd94f040.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.osgi.compatibility.state_1.0.1.v20140709-1414.jar.tmp 8e62cfe81e9575b022e4be9e6700f4ddda34dc188bd4748fbe7aa71fdd94f040.exe File created C:\Program Files\Microsoft Games\Multiplayer\Checkers\de-DE\ChkrRes.dll.mui.tmp 8e62cfe81e9575b022e4be9e6700f4ddda34dc188bd4748fbe7aa71fdd94f040.exe File created C:\Program Files\Mozilla Firefox\gmp-clearkey\0.1\clearkey.dll.sig.tmp 8e62cfe81e9575b022e4be9e6700f4ddda34dc188bd4748fbe7aa71fdd94f040.exe File created C:\Program Files\VideoLAN\VLC\plugins\access\libcdda_plugin.dll.tmp 8e62cfe81e9575b022e4be9e6700f4ddda34dc188bd4748fbe7aa71fdd94f040.exe File created C:\Program Files\7-Zip\Lang\tr.txt.tmp 8e62cfe81e9575b022e4be9e6700f4ddda34dc188bd4748fbe7aa71fdd94f040.exe File created C:\Program Files\Java\jdk1.7.0_80\include\win32\bridge\AccessBridgePackages.h.tmp 8e62cfe81e9575b022e4be9e6700f4ddda34dc188bd4748fbe7aa71fdd94f040.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Wallis.tmp 8e62cfe81e9575b022e4be9e6700f4ddda34dc188bd4748fbe7aa71fdd94f040.exe File created C:\Program Files\Microsoft Games\More Games\it-IT\MoreGames.dll.mui.tmp 8e62cfe81e9575b022e4be9e6700f4ddda34dc188bd4748fbe7aa71fdd94f040.exe File created C:\Program Files\Microsoft Games\Solitaire\de-DE\Solitaire.exe.mui.tmp 8e62cfe81e9575b022e4be9e6700f4ddda34dc188bd4748fbe7aa71fdd94f040.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\hwresslm.dat.tmp 8e62cfe81e9575b022e4be9e6700f4ddda34dc188bd4748fbe7aa71fdd94f040.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\InkDiv.dll.tmp 8e62cfe81e9575b022e4be9e6700f4ddda34dc188bd4748fbe7aa71fdd94f040.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\SpecialNavigationUp_ButtonGraphic.png.tmp 8e62cfe81e9575b022e4be9e6700f4ddda34dc188bd4748fbe7aa71fdd94f040.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Antarctica\Mawson.tmp 8e62cfe81e9575b022e4be9e6700f4ddda34dc188bd4748fbe7aa71fdd94f040.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.extensionlocation.nl_ja_4.4.0.v20140623020002.jar.tmp 8e62cfe81e9575b022e4be9e6700f4ddda34dc188bd4748fbe7aa71fdd94f040.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.e4.rcp_1.3.100.v20141007-2033\META-INF\MANIFEST.MF.tmp 8e62cfe81e9575b022e4be9e6700f4ddda34dc188bd4748fbe7aa71fdd94f040.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.console_1.1.0.v20140131-1639.jar.tmp 8e62cfe81e9575b022e4be9e6700f4ddda34dc188bd4748fbe7aa71fdd94f040.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.workbench.nl_ja_4.4.0.v20140623020002.jar.tmp 8e62cfe81e9575b022e4be9e6700f4ddda34dc188bd4748fbe7aa71fdd94f040.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-threaddump.xml.tmp 8e62cfe81e9575b022e4be9e6700f4ddda34dc188bd4748fbe7aa71fdd94f040.exe File created C:\Program Files\Common Files\Microsoft Shared\Stationery\Hand Prints.htm.tmp 8e62cfe81e9575b022e4be9e6700f4ddda34dc188bd4748fbe7aa71fdd94f040.exe File created C:\Program Files\Java\jre7\lib\fonts\LucidaBrightRegular.ttf.tmp 8e62cfe81e9575b022e4be9e6700f4ddda34dc188bd4748fbe7aa71fdd94f040.exe File created C:\Program Files\Java\jre7\lib\zi\Europe\Berlin.tmp 8e62cfe81e9575b022e4be9e6700f4ddda34dc188bd4748fbe7aa71fdd94f040.exe File created C:\Program Files\Mozilla Firefox\install.log.tmp 8e62cfe81e9575b022e4be9e6700f4ddda34dc188bd4748fbe7aa71fdd94f040.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Notes_LOOP_BG.wmv.tmp 8e62cfe81e9575b022e4be9e6700f4ddda34dc188bd4748fbe7aa71fdd94f040.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\lib\boot.jar.tmp 8e62cfe81e9575b022e4be9e6700f4ddda34dc188bd4748fbe7aa71fdd94f040.exe File created C:\Program Files\Java\jre7\bin\JAWTAccessBridge-64.dll.tmp 8e62cfe81e9575b022e4be9e6700f4ddda34dc188bd4748fbe7aa71fdd94f040.exe File created C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\es\System.RunTime.Serialization.Resources.dll.tmp 8e62cfe81e9575b022e4be9e6700f4ddda34dc188bd4748fbe7aa71fdd94f040.exe File created C:\Program Files\VideoLAN\VLC\plugins\codec\libmft_plugin.dll.tmp 8e62cfe81e9575b022e4be9e6700f4ddda34dc188bd4748fbe7aa71fdd94f040.exe File created C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\ReachFramework.dll.tmp 8e62cfe81e9575b022e4be9e6700f4ddda34dc188bd4748fbe7aa71fdd94f040.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Cayman.tmp 8e62cfe81e9575b022e4be9e6700f4ddda34dc188bd4748fbe7aa71fdd94f040.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Australia\Perth.tmp 8e62cfe81e9575b022e4be9e6700f4ddda34dc188bd4748fbe7aa71fdd94f040.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\win7TSFrame.png.tmp 8e62cfe81e9575b022e4be9e6700f4ddda34dc188bd4748fbe7aa71fdd94f040.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-keyring.xml.tmp 8e62cfe81e9575b022e4be9e6700f4ddda34dc188bd4748fbe7aa71fdd94f040.exe File created C:\Program Files\Java\jre7\bin\pack200.exe.tmp 8e62cfe81e9575b022e4be9e6700f4ddda34dc188bd4748fbe7aa71fdd94f040.exe File created C:\Program Files\Common Files\System\Ole DB\it-IT\sqloledb.rll.mui.tmp 8e62cfe81e9575b022e4be9e6700f4ddda34dc188bd4748fbe7aa71fdd94f040.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
127KB
MD584c8173893e57d78d923e89f370f35db
SHA187e7a1f2c8087a9aad9ce81968573fad10cc7b15
SHA25603a045e5c5d169e006b6f6daac9114591e5688f32698ae61e0e62b264d026251
SHA512963c34e7dd99d019199c161b694dfc8edc07f778b31589c79b1b8801f79aa87dbd18b080654bf7c9b9c78dce2ed52ac25c66d78e209e9a19a5cbf426198d6e8d
-
Filesize
136KB
MD57eb451bafb0dd02263e6391a3ad6ba85
SHA170fa9eb042a879c9d8898f852cf6f53a287442d2
SHA256b747e8c1de80bf92fe1752d828f8dbf8589f34faf0ad2cc76790644c50c88419
SHA5121eaf02f06257bec496b34a9f91f2bae77e6e9aa4401fe752af610d02abbe99c1e303b7cf3816fdc16431558f938df6d7b2952e5b73295e5c3a2932e192dafa1d