Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    150s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    09/06/2024, 11:19

General

  • Target

    dec19feedc0c6653ed7d54cf62143c4587a31370dde91f6b7ac9fc5443862b41.exe

  • Size

    44KB

  • MD5

    63714a7f27820139e6443296e0d761a5

  • SHA1

    530b708c6f2d8601ab71ddf89ef0b2520dc2932f

  • SHA256

    dec19feedc0c6653ed7d54cf62143c4587a31370dde91f6b7ac9fc5443862b41

  • SHA512

    6c57be9a94dfa7323ec8fe37833c904d46effc2dc4f8ef8acb64f3f7ebc159e975a2a8ec8eb35e81510fcf1610a8754d9a44d7575416cdfb876753b50ae91450

  • SSDEEP

    384:GBt7Br5xjLMuLAgA71FbhvDl3DG71ul3DG71XUmUIYFt1zecDT1zecDc:W7BlpNLpARFbhblkYlkuvIYFWcDYcDc

Score
9/10

Malware Config

Signatures

  • Renames multiple (3775) files with added filename extension

    This suggests ransomware activity of encrypting all the files on the system.

  • Drops file in Program Files directory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\dec19feedc0c6653ed7d54cf62143c4587a31370dde91f6b7ac9fc5443862b41.exe
    "C:\Users\Admin\AppData\Local\Temp\dec19feedc0c6653ed7d54cf62143c4587a31370dde91f6b7ac9fc5443862b41.exe"
    1⤵
    • Drops file in Program Files directory
    PID:2924

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\$Recycle.Bin\S-1-5-21-2721934792-624042501-2768869379-1000\desktop.ini.tmp

    Filesize

    45KB

    MD5

    4f81c30c9fd852055013732b9fff3acb

    SHA1

    b88a3144902f72cc1008bf3cd3004029dead2ec1

    SHA256

    fa8255af5d747a9daa3ff09dc6935badc91458b6d68b2378ec68b88cea8c626a

    SHA512

    c06d083ba6d51273dab2fa41aaf51daaf6af448c97166dcc7e3cd49d1e9edc8f50bbfaf091ff23706914901ce12069be5c3e8ede35e2d3fb82e0d4fc9e2a79e7

  • C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\Office64WW.xml.tmp

    Filesize

    53KB

    MD5

    9882bd760f9852913492780c5495e0ec

    SHA1

    7d041a04a5a537e15091a9165b60e8fb912b2223

    SHA256

    8f7f4f32c7e5632ee1a41bed3d3d1c4acb79f8f5346daf3c7385924697f4761e

    SHA512

    6ce9995b3110f73b61c8259a709e6fac746ed517bd8b997be045859b6be704f94c3ccfaaaf0887594da63a706b7604a6670ad348c017163b7bcd370e2f8ff411