Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    150s
  • max time network
    117s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    23/05/2024, 21:31

General

  • Target

    8e62cfe81e9575b022e4be9e6700f4ddda34dc188bd4748fbe7aa71fdd94f040.exe

  • Size

    127KB

  • MD5

    23764683435cf68006fbafa752d84c20

  • SHA1

    5067ea4e06c2c86825b0dbd692bd4adfd86083b7

  • SHA256

    8e62cfe81e9575b022e4be9e6700f4ddda34dc188bd4748fbe7aa71fdd94f040

  • SHA512

    d72b5235c53395b4cc7ead72597162a91d08377ca4c7c7661fea406c620ead42decfe2334fdd28d731facea2b60d6269a38927a8dda71c80193ce04bb12aa261

  • SSDEEP

    3072:6e7WpHIyRF9ESWu0SWuDmhSauvEKxVTLJtxoVz8FUDrYYaCusjdEKxVTLJtxoVz0:RqlIyFESWu0SWuGSwxP

Score
9/10

Malware Config

Signatures

  • Renames multiple (3449) files with added filename extension

    This suggests ransomware activity of encrypting all the files on the system.

  • Drops file in Program Files directory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\8e62cfe81e9575b022e4be9e6700f4ddda34dc188bd4748fbe7aa71fdd94f040.exe
    "C:\Users\Admin\AppData\Local\Temp\8e62cfe81e9575b022e4be9e6700f4ddda34dc188bd4748fbe7aa71fdd94f040.exe"
    1⤵
    • Drops file in Program Files directory
    PID:1644

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\$Recycle.Bin\S-1-5-21-3691908287-3775019229-3534252667-1000\desktop.ini.tmp

    Filesize

    127KB

    MD5

    84c8173893e57d78d923e89f370f35db

    SHA1

    87e7a1f2c8087a9aad9ce81968573fad10cc7b15

    SHA256

    03a045e5c5d169e006b6f6daac9114591e5688f32698ae61e0e62b264d026251

    SHA512

    963c34e7dd99d019199c161b694dfc8edc07f778b31589c79b1b8801f79aa87dbd18b080654bf7c9b9c78dce2ed52ac25c66d78e209e9a19a5cbf426198d6e8d

  • C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\Office64WW.xml.tmp

    Filesize

    136KB

    MD5

    7eb451bafb0dd02263e6391a3ad6ba85

    SHA1

    70fa9eb042a879c9d8898f852cf6f53a287442d2

    SHA256

    b747e8c1de80bf92fe1752d828f8dbf8589f34faf0ad2cc76790644c50c88419

    SHA512

    1eaf02f06257bec496b34a9f91f2bae77e6e9aa4401fe752af610d02abbe99c1e303b7cf3816fdc16431558f938df6d7b2952e5b73295e5c3a2932e192dafa1d