Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    149s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    25/06/2024, 18:50

General

  • Target

    12c907b08a86be6702e2a2af42afd6cb7339ea7c06c5595ac4f3d82bbc63eb5b.exe

  • Size

    66KB

  • MD5

    4e2939a007323d463ac14dfdfe04387f

  • SHA1

    52a3cac2d70c44e468ca71e7f0aed0fcf5d737d5

  • SHA256

    12c907b08a86be6702e2a2af42afd6cb7339ea7c06c5595ac4f3d82bbc63eb5b

  • SHA512

    4742cff849de6567e5ad0d662db5dec73195f4cca1ea33ff38de9d306527cd6c999072cc0d6e029778b02249a94dc10d3b9def536589a9377d22c3b0d853a181

  • SSDEEP

    768:W7BlpNLpARFbhblkYlkuvIYFWcDYcDlvcYNnVvcYNnSFjU8:W7ZNLpApCZuvIYYoYoN7n97nI

Score
9/10

Malware Config

Signatures

  • Renames multiple (3797) files with added filename extension

    This suggests ransomware activity of encrypting all the files on the system.

  • Drops file in Program Files directory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\12c907b08a86be6702e2a2af42afd6cb7339ea7c06c5595ac4f3d82bbc63eb5b.exe
    "C:\Users\Admin\AppData\Local\Temp\12c907b08a86be6702e2a2af42afd6cb7339ea7c06c5595ac4f3d82bbc63eb5b.exe"
    1⤵
    • Drops file in Program Files directory
    PID:2980

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\$Recycle.Bin\S-1-5-21-268080393-3149932598-1824759070-1000\desktop.ini.tmp

    Filesize

    67KB

    MD5

    6c6da85549a93bb1e95f780b050a7cd1

    SHA1

    edd59851b87fa723fe7db18e0a858a6b079a1d55

    SHA256

    9f2742d7b3ed155018b6cc8d6ea620b8f15c30ac0262bdebbb3ad96c3488f30f

    SHA512

    39fbb0f6f02b2d23a673907e68feb7ee30ead32d25cc9fe5df0caed8bae07d524010c39f14cc726f57d3149566deee257d6a7e12901bbf03c058df366fa1a811

  • C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\Office64WW.xml.tmp

    Filesize

    76KB

    MD5

    1e45ad5a176bc20df677b2f65ec8a0ca

    SHA1

    62173d1b432c1c456eeba04483db69dbff3d9452

    SHA256

    dffa061a8c39b05395c7355451079ac4faa6f9f31325793e7447c2bb76a4f1e4

    SHA512

    616c079056a5edb078f2e4704e9c90ba56a0ba9da652deb612f371c897d603c19f17f39bd791d2f5302a81405fc8e59fdf37980e2838ef087466d05edd33835e