Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

EA DLC Unl...v2.rar

windows7-x64

3

EA DLC Unl...v2.rar

windows10-2004-x64

7

config.ini

windows7-x64

1

config.ini

windows10-2004-x64

1

ea_desktop...on.dll

windows7-x64

1

ea_desktop...on.dll

windows10-2004-x64

1

g_Cities Skylines.ini

windows7-x64

1

g_Cities Skylines.ini

windows10-2004-x64

1

g_Dead Space 3.ini

windows7-x64

1

g_Dead Space 3.ini

windows10-2004-x64

1

g_F1 22.ini

windows7-x64

1

g_F1 22.ini

windows10-2004-x64

1

g_Frostpunk.ini

windows7-x64

1

g_Frostpunk.ini

windows10-2004-x64

1

g_GRID Legends.ini

windows7-x64

1

g_GRID Legends.ini

windows10-2004-x64

1

g_It Takes Two.ini

windows7-x64

1

g_It Takes Two.ini

windows10-2004-x64

1

g_My Time ...ia.ini

windows7-x64

1

g_My Time ...ia.ini

windows10-2004-x64

1

g_Need For...at.ini

windows7-x64

1

g_Need For...at.ini

windows10-2004-x64

1

g_Need For...ed.ini

windows7-x64

1

g_Need For...ed.ini

windows10-2004-x64

1

g_Need For...ck.ini

windows7-x64

1

g_Need For...ck.ini

windows10-2004-x64

1

g_Northgard.ini

windows7-x64

1

g_Northgard.ini

windows10-2004-x64

1

g_SimCity 2013.ini

windows7-x64

1

g_SimCity 2013.ini

windows10-2004-x64

1

g_The Sims 3.ini

windows7-x64

1

g_The Sims 3.ini

windows10-2004-x64

1

Analysis

  • max time kernel
    120s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    06/06/2024, 15:45

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    config.ini

  • Size

    770B

  • MD5

    14cf4a3ce6a5f39790b2678ee0b0cfa0

  • SHA1

    05c6c84dd6eedd4654b21af6420e0a3a69a95967

  • SHA256

    94699c9c6106c6c737820472e102b6d762a0268801dadb9c0e0272db7d5ed3bf

  • SHA512

    53898bb316da16955a43d0241d70e11ccac98e4b3a84058fe4c6ba5a2e0a35c5a239c3df7545c2bd6ab1d46af9e033a5083b6a6e080dddb4146777cbcf96d98f

Score
1/10

Malware Config

Signatures

  • Opens file in notepad (likely ransom note) 1 IoCs
    ransomware

Processes

  • C:\Windows\system32\NOTEPAD.EXE
    C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\config.ini
    1⤵
    • Opens file in notepad (likely ransom note)
    PID:2480

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads