Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
150s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
06/06/2024, 02:16
Static task
static1
Behavioral task
behavioral1
Sample
87b4cbb85b3bcccdc700b978814e151dab8982fe372dfe6667583c4fdf3f0863.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
87b4cbb85b3bcccdc700b978814e151dab8982fe372dfe6667583c4fdf3f0863.exe
Resource
win10v2004-20240508-en
General
-
Target
87b4cbb85b3bcccdc700b978814e151dab8982fe372dfe6667583c4fdf3f0863.exe
-
Size
61KB
-
MD5
7a0678b638fc1c748615944fd958801d
-
SHA1
b2e9a00a8157f2ebf708aefe84a8e50d1283e725
-
SHA256
87b4cbb85b3bcccdc700b978814e151dab8982fe372dfe6667583c4fdf3f0863
-
SHA512
f388bdee6b548bb7d02efddcce781080014a930f515aa737bc99d14d802d6f2f17a7861cc75aca8fff2f9ca855fe72367a4f98124c8004ed8178e6804821ada0
-
SSDEEP
768:W7BlphA7pARFbhvOsTKnKqtSpFCpF0YSiJgUpFpgFi101tlktRN8kgXZOXcvlkt1:W7ZhA7pApvOsOKjC0YSilpFpfkJOMinz
Malware Config
Signatures
-
Renames multiple (3693) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
Drops file in Program Files directory 64 IoCs
description ioc Process File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-spi-actions.jar.tmp 87b4cbb85b3bcccdc700b978814e151dab8982fe372dfe6667583c4fdf3f0863.exe File created C:\Program Files\Windows Media Player\Network Sharing\wmpnss_color48.bmp.tmp 87b4cbb85b3bcccdc700b978814e151dab8982fe372dfe6667583c4fdf3f0863.exe File created C:\Program Files\Windows Media Player\WMPSideShowGadget.exe.tmp 87b4cbb85b3bcccdc700b978814e151dab8982fe372dfe6667583c4fdf3f0863.exe File created C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\AcroForm\PMP\DataMatrix.pmp.tmp 87b4cbb85b3bcccdc700b978814e151dab8982fe372dfe6667583c4fdf3f0863.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\ja-JP\mip.exe.mui.tmp 87b4cbb85b3bcccdc700b978814e151dab8982fe372dfe6667583c4fdf3f0863.exe File created C:\Program Files\Common Files\System\Ole DB\ja-JP\sqlxmlx.rll.mui.tmp 87b4cbb85b3bcccdc700b978814e151dab8982fe372dfe6667583c4fdf3f0863.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-modules-appui.xml.tmp 87b4cbb85b3bcccdc700b978814e151dab8982fe372dfe6667583c4fdf3f0863.exe File created C:\Program Files\Java\jre7\lib\zi\Pacific\Majuro.tmp 87b4cbb85b3bcccdc700b978814e151dab8982fe372dfe6667583c4fdf3f0863.exe File created C:\Program Files\VideoLAN\VLC\plugins\video_filter\librotate_plugin.dll.tmp 87b4cbb85b3bcccdc700b978814e151dab8982fe372dfe6667583c4fdf3f0863.exe File created C:\Program Files\Common Files\Microsoft Shared\MSInfo\en-US\msinfo32.exe.mui.tmp 87b4cbb85b3bcccdc700b978814e151dab8982fe372dfe6667583c4fdf3f0863.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Heart_SelectionSubpicture.png.tmp 87b4cbb85b3bcccdc700b978814e151dab8982fe372dfe6667583c4fdf3f0863.exe File created C:\Program Files\Google\Chrome\Application\106.0.5249.119\MEIPreload\manifest.json.tmp 87b4cbb85b3bcccdc700b978814e151dab8982fe372dfe6667583c4fdf3f0863.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\about.html.tmp 87b4cbb85b3bcccdc700b978814e151dab8982fe372dfe6667583c4fdf3f0863.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\META-INF\ECLIPSE_.SF.tmp 87b4cbb85b3bcccdc700b978814e151dab8982fe372dfe6667583c4fdf3f0863.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-openide-dialogs.xml.tmp 87b4cbb85b3bcccdc700b978814e151dab8982fe372dfe6667583c4fdf3f0863.exe File created C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\es-ES\settings.html.tmp 87b4cbb85b3bcccdc700b978814e151dab8982fe372dfe6667583c4fdf3f0863.exe File created C:\Program Files\Common Files\System\Ole DB\oledbjvs.inc.tmp 87b4cbb85b3bcccdc700b978814e151dab8982fe372dfe6667583c4fdf3f0863.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationUp_ButtonGraphic.png.tmp 87b4cbb85b3bcccdc700b978814e151dab8982fe372dfe6667583c4fdf3f0863.exe File created C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\images\combo-hover-left.png.tmp 87b4cbb85b3bcccdc700b978814e151dab8982fe372dfe6667583c4fdf3f0863.exe File created C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\de-DE\css\settings.css.tmp 87b4cbb85b3bcccdc700b978814e151dab8982fe372dfe6667583c4fdf3f0863.exe File created C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\it-IT\js\slideShow.js.tmp 87b4cbb85b3bcccdc700b978814e151dab8982fe372dfe6667583c4fdf3f0863.exe File created C:\Program Files (x86)\Adobe\Reader 9.0\Setup Files\{AC76BA86-7AD7-1033-7B44-A90000000001}\abcpy.ini.tmp 87b4cbb85b3bcccdc700b978814e151dab8982fe372dfe6667583c4fdf3f0863.exe File created C:\Program Files\Google\Chrome\Application\106.0.5249.119\notification_helper.exe.tmp 87b4cbb85b3bcccdc700b978814e151dab8982fe372dfe6667583c4fdf3f0863.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Metlakatla.tmp 87b4cbb85b3bcccdc700b978814e151dab8982fe372dfe6667583c4fdf3f0863.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-host-views_ja.jar.tmp 87b4cbb85b3bcccdc700b978814e151dab8982fe372dfe6667583c4fdf3f0863.exe File created C:\Program Files\VideoLAN\VLC\plugins\codec\libfluidsynth_plugin.dll.tmp 87b4cbb85b3bcccdc700b978814e151dab8982fe372dfe6667583c4fdf3f0863.exe File created C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\21.png.tmp 87b4cbb85b3bcccdc700b978814e151dab8982fe372dfe6667583c4fdf3f0863.exe File created C:\Program Files\Google\Chrome\Application\106.0.5249.119\v8_context_snapshot.bin.tmp 87b4cbb85b3bcccdc700b978814e151dab8982fe372dfe6667583c4fdf3f0863.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Yakutsk.tmp 87b4cbb85b3bcccdc700b978814e151dab8982fe372dfe6667583c4fdf3f0863.exe File created C:\Program Files\Microsoft Office\Office14\NAMEEXT.DLL.tmp 87b4cbb85b3bcccdc700b978814e151dab8982fe372dfe6667583c4fdf3f0863.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\en-US\tipresx.dll.mui.tmp 87b4cbb85b3bcccdc700b978814e151dab8982fe372dfe6667583c4fdf3f0863.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\schema\com.jrockit.mc.rjmx.attributeTransformation.exsd.tmp 87b4cbb85b3bcccdc700b978814e151dab8982fe372dfe6667583c4fdf3f0863.exe File created C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\it-IT\gadget.xml.tmp 87b4cbb85b3bcccdc700b978814e151dab8982fe372dfe6667583c4fdf3f0863.exe File created C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\logo.png.tmp 87b4cbb85b3bcccdc700b978814e151dab8982fe372dfe6667583c4fdf3f0863.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.apache.httpcomponents.httpclient_4.2.6.v201311072007.jar.tmp 87b4cbb85b3bcccdc700b978814e151dab8982fe372dfe6667583c4fdf3f0863.exe File created C:\Program Files\VideoLAN\VLC\plugins\text_renderer\libtdummy_plugin.dll.tmp 87b4cbb85b3bcccdc700b978814e151dab8982fe372dfe6667583c4fdf3f0863.exe File created C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\images\bNext-disable.png.tmp 87b4cbb85b3bcccdc700b978814e151dab8982fe372dfe6667583c4fdf3f0863.exe File created C:\Program Files\VideoLAN\VLC\locale\ro\LC_MESSAGES\vlc.mo.tmp 87b4cbb85b3bcccdc700b978814e151dab8982fe372dfe6667583c4fdf3f0863.exe File created C:\Program Files\VideoLAN\VLC\plugins\access\libhttps_plugin.dll.tmp 87b4cbb85b3bcccdc700b978814e151dab8982fe372dfe6667583c4fdf3f0863.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-api-visual.xml.tmp 87b4cbb85b3bcccdc700b978814e151dab8982fe372dfe6667583c4fdf3f0863.exe File created C:\Program Files\Java\jre7\lib\zi\Pacific\Tahiti.tmp 87b4cbb85b3bcccdc700b978814e151dab8982fe372dfe6667583c4fdf3f0863.exe File created C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\39.png.tmp 87b4cbb85b3bcccdc700b978814e151dab8982fe372dfe6667583c4fdf3f0863.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\btn-next-static.png.tmp 87b4cbb85b3bcccdc700b978814e151dab8982fe372dfe6667583c4fdf3f0863.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\dark\e4-dark_basestyle.css.tmp 87b4cbb85b3bcccdc700b978814e151dab8982fe372dfe6667583c4fdf3f0863.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.css.swt_0.11.101.v20140818-1343.jar.tmp 87b4cbb85b3bcccdc700b978814e151dab8982fe372dfe6667583c4fdf3f0863.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.updatechecker.nl_zh_4.4.0.v20140623020002.jar.tmp 87b4cbb85b3bcccdc700b978814e151dab8982fe372dfe6667583c4fdf3f0863.exe File created C:\Program Files\Java\jre7\lib\fonts\LucidaTypewriterRegular.ttf.tmp 87b4cbb85b3bcccdc700b978814e151dab8982fe372dfe6667583c4fdf3f0863.exe File created C:\Program Files\LimitDismount.asx.tmp 87b4cbb85b3bcccdc700b978814e151dab8982fe372dfe6667583c4fdf3f0863.exe File created C:\Program Files\Microsoft Games\Multiplayer\Checkers\chkrzm.exe.tmp 87b4cbb85b3bcccdc700b978814e151dab8982fe372dfe6667583c4fdf3f0863.exe File created C:\Program Files\Microsoft Games\Purble Place\it-IT\PurblePlace.exe.mui.tmp 87b4cbb85b3bcccdc700b978814e151dab8982fe372dfe6667583c4fdf3f0863.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\ipssve.xml.tmp 87b4cbb85b3bcccdc700b978814e151dab8982fe372dfe6667583c4fdf3f0863.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.ecore_2.10.1.v20140901-1043\feature.xml.tmp 87b4cbb85b3bcccdc700b978814e151dab8982fe372dfe6667583c4fdf3f0863.exe File created C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\es-ES\settings.html.tmp 87b4cbb85b3bcccdc700b978814e151dab8982fe372dfe6667583c4fdf3f0863.exe File created C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\images\pause_down.png.tmp 87b4cbb85b3bcccdc700b978814e151dab8982fe372dfe6667583c4fdf3f0863.exe File created C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\en-US\js\settings.js.tmp 87b4cbb85b3bcccdc700b978814e151dab8982fe372dfe6667583c4fdf3f0863.exe File created C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libsimple_channel_mixer_plugin.dll.tmp 87b4cbb85b3bcccdc700b978814e151dab8982fe372dfe6667583c4fdf3f0863.exe File created C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\de-DE\gadget.xml.tmp 87b4cbb85b3bcccdc700b978814e151dab8982fe372dfe6667583c4fdf3f0863.exe File created C:\Program Files\VideoLAN\VLC\plugins\demux\libdiracsys_plugin.dll.tmp 87b4cbb85b3bcccdc700b978814e151dab8982fe372dfe6667583c4fdf3f0863.exe File created C:\Program Files\VideoLAN\VLC\plugins\video_filter\libalphamask_plugin.dll.tmp 87b4cbb85b3bcccdc700b978814e151dab8982fe372dfe6667583c4fdf3f0863.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.greychart.ui.zh_CN_5.5.0.165303.jar.tmp 87b4cbb85b3bcccdc700b978814e151dab8982fe372dfe6667583c4fdf3f0863.exe File created C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\de\PresentationCore.resources.dll.tmp 87b4cbb85b3bcccdc700b978814e151dab8982fe372dfe6667583c4fdf3f0863.exe File created C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\es.pak.tmp 87b4cbb85b3bcccdc700b978814e151dab8982fe372dfe6667583c4fdf3f0863.exe File created C:\Program Files\Windows Sidebar\Gadgets\CPU.Gadget\fr-FR\gadget.xml.tmp 87b4cbb85b3bcccdc700b978814e151dab8982fe372dfe6667583c4fdf3f0863.exe File created C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\btn_close_down_BIDI.png.tmp 87b4cbb85b3bcccdc700b978814e151dab8982fe372dfe6667583c4fdf3f0863.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
61KB
MD53a3ffcc014c9c2863e9e37fdb67a9410
SHA14194f9e7f0f0738e08c311c5b0ae4ce7e9748d84
SHA2560d02406b69185daf7cbeda5943084b91cbe38ec25719b2121d28147e7bd9c8a4
SHA5120f603ee8483e80afdf148bc7bd85599cb8fdca37bcce346d98ed196f64d0e647f610c08f7a6eb387cbd5334aea804ccd2ecd01f27403296d9b4782e2141e9350
-
Filesize
70KB
MD58c90df9d922de5c5fae69200767674fa
SHA152b3d0ed2e194427ec1830a0d0e43dc5bb8ac9cd
SHA256b64c92810fb4556aa87742da2dd188ff8b32b84afa7f6336b3e3b5bf90bca05e
SHA5120cfd8b804a8208975ff467c0c3b012c38996972b2ce4ffec0a25484b12584c968a638d17ccad95c5c7984a8007cc204dff93cbbab711c4b24fa4e94b00b0d2fc