Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
149s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
25/06/2024, 18:50
Static task
static1
Behavioral task
behavioral1
Sample
12c907b08a86be6702e2a2af42afd6cb7339ea7c06c5595ac4f3d82bbc63eb5b.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
12c907b08a86be6702e2a2af42afd6cb7339ea7c06c5595ac4f3d82bbc63eb5b.exe
Resource
win10v2004-20240226-en
General
-
Target
12c907b08a86be6702e2a2af42afd6cb7339ea7c06c5595ac4f3d82bbc63eb5b.exe
-
Size
66KB
-
MD5
4e2939a007323d463ac14dfdfe04387f
-
SHA1
52a3cac2d70c44e468ca71e7f0aed0fcf5d737d5
-
SHA256
12c907b08a86be6702e2a2af42afd6cb7339ea7c06c5595ac4f3d82bbc63eb5b
-
SHA512
4742cff849de6567e5ad0d662db5dec73195f4cca1ea33ff38de9d306527cd6c999072cc0d6e029778b02249a94dc10d3b9def536589a9377d22c3b0d853a181
-
SSDEEP
768:W7BlpNLpARFbhblkYlkuvIYFWcDYcDlvcYNnVvcYNnSFjU8:W7ZNLpApCZuvIYYoYoN7n97nI
Malware Config
Signatures
-
Renames multiple (3797) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
Drops file in Program Files directory 64 IoCs
description ioc Process File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.feature_1.1.0.v20140827-1444\META-INF\eclipse.inf.tmp 12c907b08a86be6702e2a2af42afd6cb7339ea7c06c5595ac4f3d82bbc63eb5b.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler-attach_ja.jar.tmp 12c907b08a86be6702e2a2af42afd6cb7339ea7c06c5595ac4f3d82bbc63eb5b.exe File created C:\Program Files\Java\jre7\lib\zi\EET.tmp 12c907b08a86be6702e2a2af42afd6cb7339ea7c06c5595ac4f3d82bbc63eb5b.exe File created C:\Program Files\Java\jre7\THIRDPARTYLICENSEREADME-JAVAFX.txt.tmp 12c907b08a86be6702e2a2af42afd6cb7339ea7c06c5595ac4f3d82bbc63eb5b.exe File created C:\Program Files\Java\jre7\lib\zi\Pacific\Kosrae.tmp 12c907b08a86be6702e2a2af42afd6cb7339ea7c06c5595ac4f3d82bbc63eb5b.exe File created C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\Providers\Proximity\11.00\brt.fca.tmp 12c907b08a86be6702e2a2af42afd6cb7339ea7c06c5595ac4f3d82bbc63eb5b.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\keypadbase.xml.tmp 12c907b08a86be6702e2a2af42afd6cb7339ea7c06c5595ac4f3d82bbc63eb5b.exe File created C:\Program Files\Common Files\System\Ole DB\es-ES\oledb32r.dll.mui.tmp 12c907b08a86be6702e2a2af42afd6cb7339ea7c06c5595ac4f3d82bbc63eb5b.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Scenes_INTRO_BG.wmv.tmp 12c907b08a86be6702e2a2af42afd6cb7339ea7c06c5595ac4f3d82bbc63eb5b.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\reflect.png.tmp 12c907b08a86be6702e2a2af42afd6cb7339ea7c06c5595ac4f3d82bbc63eb5b.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-openide-windows.xml.tmp 12c907b08a86be6702e2a2af42afd6cb7339ea7c06c5595ac4f3d82bbc63eb5b.exe File created C:\Program Files\Java\jre7\lib\zi\Africa\El_Aaiun.tmp 12c907b08a86be6702e2a2af42afd6cb7339ea7c06c5595ac4f3d82bbc63eb5b.exe File created C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\Mac\UKRAINE.TXT.tmp 12c907b08a86be6702e2a2af42afd6cb7339ea7c06c5595ac4f3d82bbc63eb5b.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT-11.tmp 12c907b08a86be6702e2a2af42afd6cb7339ea7c06c5595ac4f3d82bbc63eb5b.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-core-startup.xml.tmp 12c907b08a86be6702e2a2af42afd6cb7339ea7c06c5595ac4f3d82bbc63eb5b.exe File created C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libaudiobargraph_a_plugin.dll.tmp 12c907b08a86be6702e2a2af42afd6cb7339ea7c06c5595ac4f3d82bbc63eb5b.exe File created C:\Program Files\VideoLAN\VLC\plugins\stream_out\libstream_out_dummy_plugin.dll.tmp 12c907b08a86be6702e2a2af42afd6cb7339ea7c06c5595ac4f3d82bbc63eb5b.exe File created C:\Program Files\Windows Defender\MpSvc.dll.tmp 12c907b08a86be6702e2a2af42afd6cb7339ea7c06c5595ac4f3d82bbc63eb5b.exe File created C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\drag.png.tmp 12c907b08a86be6702e2a2af42afd6cb7339ea7c06c5595ac4f3d82bbc63eb5b.exe File created C:\Program Files\VideoLAN\VLC\plugins\visualization\libgoom_plugin.dll.tmp 12c907b08a86be6702e2a2af42afd6cb7339ea7c06c5595ac4f3d82bbc63eb5b.exe File created C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\Mac\ROMANIAN.TXT.tmp 12c907b08a86be6702e2a2af42afd6cb7339ea7c06c5595ac4f3d82bbc63eb5b.exe File created C:\Program Files\Common Files\System\ado\msado28.tlb.tmp 12c907b08a86be6702e2a2af42afd6cb7339ea7c06c5595ac4f3d82bbc63eb5b.exe File created C:\Program Files\Internet Explorer\Timeline.cpu.xml.tmp 12c907b08a86be6702e2a2af42afd6cb7339ea7c06c5595ac4f3d82bbc63eb5b.exe File created C:\Program Files\Java\jdk1.7.0_80\include\win32\bridge\AccessBridgeCalls.h.tmp 12c907b08a86be6702e2a2af42afd6cb7339ea7c06c5595ac4f3d82bbc63eb5b.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Campo_Grande.tmp 12c907b08a86be6702e2a2af42afd6cb7339ea7c06c5595ac4f3d82bbc63eb5b.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.common_2.10.1.v20140901-1043\feature.xml.tmp 12c907b08a86be6702e2a2af42afd6cb7339ea7c06c5595ac4f3d82bbc63eb5b.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.w3c.css.sac_1.3.1.v200903091627.jar.tmp 12c907b08a86be6702e2a2af42afd6cb7339ea7c06c5595ac4f3d82bbc63eb5b.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-explorer_zh_CN.jar.tmp 12c907b08a86be6702e2a2af42afd6cb7339ea7c06c5595ac4f3d82bbc63eb5b.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\org-netbeans-modules-profiler-snaptracer.jar.tmp 12c907b08a86be6702e2a2af42afd6cb7339ea7c06c5595ac4f3d82bbc63eb5b.exe File created C:\Program Files\Microsoft Games\Multiplayer\Checkers\ChkrRes.dll.tmp 12c907b08a86be6702e2a2af42afd6cb7339ea7c06c5595ac4f3d82bbc63eb5b.exe File created C:\Program Files\Common Files\Microsoft Shared\Stationery\Stucco.gif.tmp 12c907b08a86be6702e2a2af42afd6cb7339ea7c06c5595ac4f3d82bbc63eb5b.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.launcher.nl_zh_4.4.0.v20140623020002.jar.tmp 12c907b08a86be6702e2a2af42afd6cb7339ea7c06c5595ac4f3d82bbc63eb5b.exe File created C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\js\main.js.tmp 12c907b08a86be6702e2a2af42afd6cb7339ea7c06c5595ac4f3d82bbc63eb5b.exe File created C:\Program Files\7-Zip\Lang\sr-spc.txt.tmp 12c907b08a86be6702e2a2af42afd6cb7339ea7c06c5595ac4f3d82bbc63eb5b.exe File created C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\de-DE\js\service.js.tmp 12c907b08a86be6702e2a2af42afd6cb7339ea7c06c5595ac4f3d82bbc63eb5b.exe File created C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\VDKHome\ENU\VDK10.STC.tmp 12c907b08a86be6702e2a2af42afd6cb7339ea7c06c5595ac4f3d82bbc63eb5b.exe File created C:\Program Files\Microsoft Games\Solitaire\it-IT\Solitaire.exe.mui.tmp 12c907b08a86be6702e2a2af42afd6cb7339ea7c06c5595ac4f3d82bbc63eb5b.exe File created C:\Program Files\VideoLAN\VLC\hrtfs\dodeca_and_7channel_3DSL_HRTF.sofa.tmp 12c907b08a86be6702e2a2af42afd6cb7339ea7c06c5595ac4f3d82bbc63eb5b.exe File created C:\Program Files\DVD Maker\en-US\WMM2CLIP.dll.mui.tmp 12c907b08a86be6702e2a2af42afd6cb7339ea7c06c5595ac4f3d82bbc63eb5b.exe File created C:\Program Files\Internet Explorer\en-US\jsprofilerui.dll.mui.tmp 12c907b08a86be6702e2a2af42afd6cb7339ea7c06c5595ac4f3d82bbc63eb5b.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\jce.jar.tmp 12c907b08a86be6702e2a2af42afd6cb7339ea7c06c5595ac4f3d82bbc63eb5b.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Merida.tmp 12c907b08a86be6702e2a2af42afd6cb7339ea7c06c5595ac4f3d82bbc63eb5b.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.repository.nl_ja_4.4.0.v20140623020002.jar.tmp 12c907b08a86be6702e2a2af42afd6cb7339ea7c06c5595ac4f3d82bbc63eb5b.exe File created C:\Program Files\Java\jre7\lib\javaws.jar.tmp 12c907b08a86be6702e2a2af42afd6cb7339ea7c06c5595ac4f3d82bbc63eb5b.exe File created C:\Program Files\VideoLAN\VLC\plugins\demux\libmpgv_plugin.dll.tmp 12c907b08a86be6702e2a2af42afd6cb7339ea7c06c5595ac4f3d82bbc63eb5b.exe File created C:\Program Files\Windows Media Player\fr-FR\WMPDMC.exe.mui.tmp 12c907b08a86be6702e2a2af42afd6cb7339ea7c06c5595ac4f3d82bbc63eb5b.exe File created C:\Program Files (x86)\Common Files\microsoft shared\ink\fr-FR\TipTsf.dll.mui.tmp 12c907b08a86be6702e2a2af42afd6cb7339ea7c06c5595ac4f3d82bbc63eb5b.exe File created C:\Program Files\Windows Media Player\es-ES\mpvis.dll.mui.tmp 12c907b08a86be6702e2a2af42afd6cb7339ea7c06c5595ac4f3d82bbc63eb5b.exe File created C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Csi.dll.tmp 12c907b08a86be6702e2a2af42afd6cb7339ea7c06c5595ac4f3d82bbc63eb5b.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\en-US\TipRes.dll.mui.tmp 12c907b08a86be6702e2a2af42afd6cb7339ea7c06c5595ac4f3d82bbc63eb5b.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.simpleconfigurator.manipulator.nl_zh_4.4.0.v20140623020002.jar.tmp 12c907b08a86be6702e2a2af42afd6cb7339ea7c06c5595ac4f3d82bbc63eb5b.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.jface.databinding.nl_ja_4.4.0.v20140623020002.jar.tmp 12c907b08a86be6702e2a2af42afd6cb7339ea7c06c5595ac4f3d82bbc63eb5b.exe File created C:\Program Files\Java\jre7\lib\zi\America\Denver.tmp 12c907b08a86be6702e2a2af42afd6cb7339ea7c06c5595ac4f3d82bbc63eb5b.exe File created C:\Program Files\Java\jre7\lib\zi\Etc\GMT+10.tmp 12c907b08a86be6702e2a2af42afd6cb7339ea7c06c5595ac4f3d82bbc63eb5b.exe File created C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\es\System.Printing.resources.dll.tmp 12c907b08a86be6702e2a2af42afd6cb7339ea7c06c5595ac4f3d82bbc63eb5b.exe File created C:\Program Files\Windows Media Player\fr-FR\wmpnssci.dll.mui.tmp 12c907b08a86be6702e2a2af42afd6cb7339ea7c06c5595ac4f3d82bbc63eb5b.exe File created C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_snow.png.tmp 12c907b08a86be6702e2a2af42afd6cb7339ea7c06c5595ac4f3d82bbc63eb5b.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\16_9-frame-background.png.tmp 12c907b08a86be6702e2a2af42afd6cb7339ea7c06c5595ac4f3d82bbc63eb5b.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Honolulu.tmp 12c907b08a86be6702e2a2af42afd6cb7339ea7c06c5595ac4f3d82bbc63eb5b.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.console_1.0.300.v20131113-1212.jar.tmp 12c907b08a86be6702e2a2af42afd6cb7339ea7c06c5595ac4f3d82bbc63eb5b.exe File created C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\System.IO.Log.dll.tmp 12c907b08a86be6702e2a2af42afd6cb7339ea7c06c5595ac4f3d82bbc63eb5b.exe File created C:\Program Files\VideoLAN\VLC\locale\he\LC_MESSAGES\vlc.mo.tmp 12c907b08a86be6702e2a2af42afd6cb7339ea7c06c5595ac4f3d82bbc63eb5b.exe File created C:\Program Files\VideoLAN\VLC\plugins\audio_output\libwasapi_plugin.dll.tmp 12c907b08a86be6702e2a2af42afd6cb7339ea7c06c5595ac4f3d82bbc63eb5b.exe File created C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Icons\APIFile_8.ico.tmp 12c907b08a86be6702e2a2af42afd6cb7339ea7c06c5595ac4f3d82bbc63eb5b.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
67KB
MD56c6da85549a93bb1e95f780b050a7cd1
SHA1edd59851b87fa723fe7db18e0a858a6b079a1d55
SHA2569f2742d7b3ed155018b6cc8d6ea620b8f15c30ac0262bdebbb3ad96c3488f30f
SHA51239fbb0f6f02b2d23a673907e68feb7ee30ead32d25cc9fe5df0caed8bae07d524010c39f14cc726f57d3149566deee257d6a7e12901bbf03c058df366fa1a811
-
Filesize
76KB
MD51e45ad5a176bc20df677b2f65ec8a0ca
SHA162173d1b432c1c456eeba04483db69dbff3d9452
SHA256dffa061a8c39b05395c7355451079ac4faa6f9f31325793e7447c2bb76a4f1e4
SHA512616c079056a5edb078f2e4704e9c90ba56a0ba9da652deb612f371c897d603c19f17f39bd791d2f5302a81405fc8e59fdf37980e2838ef087466d05edd33835e