Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
150s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240419-en -
resource tags
arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system -
submitted
02/06/2024, 00:01
Static task
static1
Behavioral task
behavioral1
Sample
91eed4bd03c81a8d25ec9fd6497c539f1122751c775a1ce9e143dea2c26d8ff2.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
91eed4bd03c81a8d25ec9fd6497c539f1122751c775a1ce9e143dea2c26d8ff2.exe
Resource
win10v2004-20240508-en
General
-
Target
91eed4bd03c81a8d25ec9fd6497c539f1122751c775a1ce9e143dea2c26d8ff2.exe
-
Size
63KB
-
MD5
61b38170300df4f2f4143a6bed9d98b9
-
SHA1
4bc0b8a35f73d52edd28e11a837bced48b1b9410
-
SHA256
91eed4bd03c81a8d25ec9fd6497c539f1122751c775a1ce9e143dea2c26d8ff2
-
SHA512
dc0001d65ef3e76f27d7f3197c6b19ca56b1d549e1a854fbafc516e0be50acb4cb93dbedcf1eb15dadda47e423aa7850b12c703d8dfebd06fe78823fb0dd9443
-
SSDEEP
768:W7BlphA7pARFbhvOsTKnKqtSpFCpF0YSiJgUpFpgFi101tlktRN8kgXZOXcvlkt0:W7ZhA7pApvOsOKjC0YSilpFpfkJOMYY
Malware Config
Signatures
-
Renames multiple (3430) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
Drops file in Program Files directory 64 IoCs
description ioc Process File created C:\Program Files\Common Files\System\msadc\msadco.dll.tmp 91eed4bd03c81a8d25ec9fd6497c539f1122751c775a1ce9e143dea2c26d8ff2.exe File created C:\Program Files\Java\jre7\lib\zi\America\Indiana\Winamac.tmp 91eed4bd03c81a8d25ec9fd6497c539f1122751c775a1ce9e143dea2c26d8ff2.exe File created C:\Program Files\Java\jre7\lib\zi\Asia\Ho_Chi_Minh.tmp 91eed4bd03c81a8d25ec9fd6497c539f1122751c775a1ce9e143dea2c26d8ff2.exe File created C:\Program Files\Java\jre7\lib\zi\SystemV\MST7.tmp 91eed4bd03c81a8d25ec9fd6497c539f1122751c775a1ce9e143dea2c26d8ff2.exe File created C:\Program Files\VideoLAN\VLC\locale\cy\LC_MESSAGES\vlc.mo.tmp 91eed4bd03c81a8d25ec9fd6497c539f1122751c775a1ce9e143dea2c26d8ff2.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\osknumpad.xml.tmp 91eed4bd03c81a8d25ec9fd6497c539f1122751c775a1ce9e143dea2c26d8ff2.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Bahia.tmp 91eed4bd03c81a8d25ec9fd6497c539f1122751c775a1ce9e143dea2c26d8ff2.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Australia\Currie.tmp 91eed4bd03c81a8d25ec9fd6497c539f1122751c775a1ce9e143dea2c26d8ff2.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.directorywatcher.nl_ja_4.4.0.v20140623020002.jar.tmp 91eed4bd03c81a8d25ec9fd6497c539f1122751c775a1ce9e143dea2c26d8ff2.exe File created C:\Program Files\Java\jre7\bin\prism-d3d.dll.tmp 91eed4bd03c81a8d25ec9fd6497c539f1122751c775a1ce9e143dea2c26d8ff2.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-split.avi.tmp 91eed4bd03c81a8d25ec9fd6497c539f1122751c775a1ce9e143dea2c26d8ff2.exe File created C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\es.pak.tmp 91eed4bd03c81a8d25ec9fd6497c539f1122751c775a1ce9e143dea2c26d8ff2.exe File created C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\sl.pak.tmp 91eed4bd03c81a8d25ec9fd6497c539f1122751c775a1ce9e143dea2c26d8ff2.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\high-contrast.css.tmp 91eed4bd03c81a8d25ec9fd6497c539f1122751c775a1ce9e143dea2c26d8ff2.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-openide-text.jar.tmp 91eed4bd03c81a8d25ec9fd6497c539f1122751c775a1ce9e143dea2c26d8ff2.exe File created C:\Program Files\Java\jre7\lib\zi\America\Araguaina.tmp 91eed4bd03c81a8d25ec9fd6497c539f1122751c775a1ce9e143dea2c26d8ff2.exe File created C:\Program Files\VideoLAN\VLC\locale\ps\LC_MESSAGES\vlc.mo.tmp 91eed4bd03c81a8d25ec9fd6497c539f1122751c775a1ce9e143dea2c26d8ff2.exe File created C:\Program Files\VideoLAN\VLC\plugins\video_chroma\libi420_rgb_mmx_plugin.dll.tmp 91eed4bd03c81a8d25ec9fd6497c539f1122751c775a1ce9e143dea2c26d8ff2.exe File created C:\Program Files\Common Files\Microsoft Shared\Stationery\Peacock.jpg.tmp 91eed4bd03c81a8d25ec9fd6497c539f1122751c775a1ce9e143dea2c26d8ff2.exe File created C:\Program Files\Java\jre7\lib\zi\America\Bahia_Banderas.tmp 91eed4bd03c81a8d25ec9fd6497c539f1122751c775a1ce9e143dea2c26d8ff2.exe File created C:\Program Files\Mozilla Firefox\api-ms-win-core-synch-l1-2-0.dll.tmp 91eed4bd03c81a8d25ec9fd6497c539f1122751c775a1ce9e143dea2c26d8ff2.exe File created C:\Program Files\VideoLAN\VLC\plugins\spu\liblogo_plugin.dll.tmp 91eed4bd03c81a8d25ec9fd6497c539f1122751c775a1ce9e143dea2c26d8ff2.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\InkDiv.dll.tmp 91eed4bd03c81a8d25ec9fd6497c539f1122751c775a1ce9e143dea2c26d8ff2.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT+3.tmp 91eed4bd03c81a8d25ec9fd6497c539f1122751c775a1ce9e143dea2c26d8ff2.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.jface.databinding.nl_ja_4.4.0.v20140623020002.jar.tmp 91eed4bd03c81a8d25ec9fd6497c539f1122751c775a1ce9e143dea2c26d8ff2.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-swing-outline_ja.jar.tmp 91eed4bd03c81a8d25ec9fd6497c539f1122751c775a1ce9e143dea2c26d8ff2.exe File created C:\Program Files\Java\jre7\lib\zi\Asia\Dili.tmp 91eed4bd03c81a8d25ec9fd6497c539f1122751c775a1ce9e143dea2c26d8ff2.exe File created C:\Program Files\Java\jre7\lib\zi\CET.tmp 91eed4bd03c81a8d25ec9fd6497c539f1122751c775a1ce9e143dea2c26d8ff2.exe File created C:\Program Files\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-icons_228ef1_256x240.png.tmp 91eed4bd03c81a8d25ec9fd6497c539f1122751c775a1ce9e143dea2c26d8ff2.exe File created C:\Program Files\VideoLAN\VLC\plugins\access\libtimecode_plugin.dll.tmp 91eed4bd03c81a8d25ec9fd6497c539f1122751c775a1ce9e143dea2c26d8ff2.exe File created C:\Program Files\VideoLAN\VLC\plugins\codec\liboggspots_plugin.dll.tmp 91eed4bd03c81a8d25ec9fd6497c539f1122751c775a1ce9e143dea2c26d8ff2.exe File created C:\Program Files\7-Zip\Lang\hy.txt.tmp 91eed4bd03c81a8d25ec9fd6497c539f1122751c775a1ce9e143dea2c26d8ff2.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-back-static.png.tmp 91eed4bd03c81a8d25ec9fd6497c539f1122751c775a1ce9e143dea2c26d8ff2.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\bin\deploy.dll.tmp 91eed4bd03c81a8d25ec9fd6497c539f1122751c775a1ce9e143dea2c26d8ff2.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\logging.properties.tmp 91eed4bd03c81a8d25ec9fd6497c539f1122751c775a1ce9e143dea2c26d8ff2.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Amsterdam.tmp 91eed4bd03c81a8d25ec9fd6497c539f1122751c775a1ce9e143dea2c26d8ff2.exe File created C:\Program Files\Java\jre7\lib\zi\Asia\Magadan.tmp 91eed4bd03c81a8d25ec9fd6497c539f1122751c775a1ce9e143dea2c26d8ff2.exe File created C:\Program Files\VideoLAN\VLC\plugins\video_filter\libsepia_plugin.dll.tmp 91eed4bd03c81a8d25ec9fd6497c539f1122751c775a1ce9e143dea2c26d8ff2.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\background.png.tmp 91eed4bd03c81a8d25ec9fd6497c539f1122751c775a1ce9e143dea2c26d8ff2.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\security\cacerts.tmp 91eed4bd03c81a8d25ec9fd6497c539f1122751c775a1ce9e143dea2c26d8ff2.exe File created C:\Program Files\Java\jre7\lib\zi\Europe\Prague.tmp 91eed4bd03c81a8d25ec9fd6497c539f1122751c775a1ce9e143dea2c26d8ff2.exe File created C:\Program Files\Microsoft Games\Solitaire\Solitaire.exe.tmp 91eed4bd03c81a8d25ec9fd6497c539f1122751c775a1ce9e143dea2c26d8ff2.exe File created C:\Program Files\Common Files\Microsoft Shared\Filters\VISFILT.DLL.tmp 91eed4bd03c81a8d25ec9fd6497c539f1122751c775a1ce9e143dea2c26d8ff2.exe File created C:\Program Files\Java\jdk1.7.0_80\bin\jli.dll.tmp 91eed4bd03c81a8d25ec9fd6497c539f1122751c775a1ce9e143dea2c26d8ff2.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\SystemV\PST8.tmp 91eed4bd03c81a8d25ec9fd6497c539f1122751c775a1ce9e143dea2c26d8ff2.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.flightrecorder.controlpanel.ui.configuration_5.5.0.165303.jar.tmp 91eed4bd03c81a8d25ec9fd6497c539f1122751c775a1ce9e143dea2c26d8ff2.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.launcher.win32.win32.x86_64_1.1.200.v20141007-2033\launcher.win32.win32.x86_64.properties.tmp 91eed4bd03c81a8d25ec9fd6497c539f1122751c775a1ce9e143dea2c26d8ff2.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-lib-uihandler.xml.tmp 91eed4bd03c81a8d25ec9fd6497c539f1122751c775a1ce9e143dea2c26d8ff2.exe File created C:\Program Files\Java\jre7\lib\zi\Atlantic\Reykjavik.tmp 91eed4bd03c81a8d25ec9fd6497c539f1122751c775a1ce9e143dea2c26d8ff2.exe File created C:\Program Files\Mozilla Firefox\application.ini.tmp 91eed4bd03c81a8d25ec9fd6497c539f1122751c775a1ce9e143dea2c26d8ff2.exe File created C:\Program Files\Java\jdk1.7.0_80\COPYRIGHT.tmp 91eed4bd03c81a8d25ec9fd6497c539f1122751c775a1ce9e143dea2c26d8ff2.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Simferopol.tmp 91eed4bd03c81a8d25ec9fd6497c539f1122751c775a1ce9e143dea2c26d8ff2.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.ssl.feature_1.0.0.v20140827-1444\feature.properties.tmp 91eed4bd03c81a8d25ec9fd6497c539f1122751c775a1ce9e143dea2c26d8ff2.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx.ext_5.5.0.165303.jar.tmp 91eed4bd03c81a8d25ec9fd6497c539f1122751c775a1ce9e143dea2c26d8ff2.exe File created C:\Program Files\VideoLAN\VLC\plugins\packetizer\libpacketizer_copy_plugin.dll.tmp 91eed4bd03c81a8d25ec9fd6497c539f1122751c775a1ce9e143dea2c26d8ff2.exe File created C:\Program Files\VideoLAN\VLC\plugins\video_filter\libripple_plugin.dll.tmp 91eed4bd03c81a8d25ec9fd6497c539f1122751c775a1ce9e143dea2c26d8ff2.exe File created C:\Program Files\Common Files\Microsoft Shared\Stationery\Genko_1.emf.tmp 91eed4bd03c81a8d25ec9fd6497c539f1122751c775a1ce9e143dea2c26d8ff2.exe File created C:\Program Files\Google\Chrome\Application\chrome.VisualElementsManifest.xml.tmp 91eed4bd03c81a8d25ec9fd6497c539f1122751c775a1ce9e143dea2c26d8ff2.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\SystemV\EST5EDT.tmp 91eed4bd03c81a8d25ec9fd6497c539f1122751c775a1ce9e143dea2c26d8ff2.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-masterfs.xml.tmp 91eed4bd03c81a8d25ec9fd6497c539f1122751c775a1ce9e143dea2c26d8ff2.exe File created C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libugly_resampler_plugin.dll.tmp 91eed4bd03c81a8d25ec9fd6497c539f1122751c775a1ce9e143dea2c26d8ff2.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\notification_plugin.jar.tmp 91eed4bd03c81a8d25ec9fd6497c539f1122751c775a1ce9e143dea2c26d8ff2.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.ui.zh_CN_5.5.0.165303.jar.tmp 91eed4bd03c81a8d25ec9fd6497c539f1122751c775a1ce9e143dea2c26d8ff2.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.security.win32.x86_64_1.0.100.v20130327-1442.jar.tmp 91eed4bd03c81a8d25ec9fd6497c539f1122751c775a1ce9e143dea2c26d8ff2.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
MD512782f225ec40e4631d56c2059faf8f3
SHA17d14352f22e581b73545586ee480bd30d488ae20
SHA25676d7fe677a4b54eba69f6c2c73fe7f22b2a55c03a62c8f27ea58510178aab7b8
SHA5129d869083e926727f77a9c0cae3d428eb08f7a7bdf8263761ce89d1f5e8f11782c1eb9c9d45be0013e6958476310e441e5b9ee1c99700896ceacb871245adee4b
-
Filesize
72KB
MD5cf7ccbad792351d5cbf1e1b214933862
SHA1ea95bbe5a60e8d3e4f07b315d9f37718374cbc58
SHA25602a30b228c90b5d75cf397ea9cbc57b95abac2e71aa79c8e31489c93682a33eb
SHA5121bbc46964c16502647d1827ab364e2f58d9373238b76a0a9cd0d6d3755ff08306e24ce4794de51b996763e04d73ff40786bf8f6db6681869d6eedaee6b057d54