Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    149s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    10/06/2024, 20:51

General

  • Target

    36fb086c7bcb463e39d0aa3138394a103a17f54a498da859573456894cf172a2.exe

  • Size

    76KB

  • MD5

    7f5617fbb5a7bdaf41972ab4fe135fdd

  • SHA1

    78c96f9e9e6f7293d68e87817f4ff9519b9d7da2

  • SHA256

    36fb086c7bcb463e39d0aa3138394a103a17f54a498da859573456894cf172a2

  • SHA512

    7db4767394f483dc87f8ad4b1c3fd3da661d7bbf3624b85c1d6358d739b6c47991403f6cf3f9303ba3663378a474d5d6e22c447d17944242a5429f8c6ae943fb

  • SSDEEP

    1536:W7ZppApUFpEhLfyBtPf50FWkFpPDze/qFsxEhLfyBtPf50FWkFpPDze/qFsAcEhA:6pWpUFpEhLfyBtPf50FWkFpPDze/qFsR

Score
9/10

Malware Config

Signatures

  • Renames multiple (3688) files with added filename extension

    This suggests ransomware activity of encrypting all the files on the system.

  • Drops file in Program Files directory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\36fb086c7bcb463e39d0aa3138394a103a17f54a498da859573456894cf172a2.exe
    "C:\Users\Admin\AppData\Local\Temp\36fb086c7bcb463e39d0aa3138394a103a17f54a498da859573456894cf172a2.exe"
    1⤵
    • Drops file in Program Files directory
    PID:2580

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\$Recycle.Bin\S-1-5-21-2737914667-933161113-3798636211-1000\desktop.ini.tmp

    Filesize

    77KB

    MD5

    f7589d6a95e7f590c3d0a98dffccf2e4

    SHA1

    d6576269de7b85467fbb9f145895697edadefe51

    SHA256

    db1236eaf4612849f36bc19292459138b84e77178c99eac3f7a6e00bf5b629f9

    SHA512

    3ac7bae0be5ef491607276b7d966d98b96f23f00929918b29565f05b14ce0a72f130d08fb685fd842f964bf493e3c8eb289ce9741b95ea0be946ad9c503fc64e

  • C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\Office64WW.xml.tmp

    Filesize

    85KB

    MD5

    e225f81f3dce8185516a2c0c92cc438b

    SHA1

    0179d5390c804685fbd6314299aaa4b399c51931

    SHA256

    7905e7dbaf80a4122b348469bb05fd189ab7bdd0ff7c96b0b90e351329b33318

    SHA512

    c87b7df0cfe7103d2f78cedda80688394f704daf34a290fb2b67dfea8727bbd84c5b8bfb71b2b5f769c05b0910da145ebe40d610a297f1610e19b1c8e2530452