Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    150s
  • max time network
    124s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240611-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29/06/2024, 04:00

General

  • Target

    ddfdea201fe17ea90bee5794596bda9e474186fe898d8da90b82d97da721bbcb.exe

  • Size

    97KB

  • MD5

    3f9b37767afd5cafd9aa095472387fa4

  • SHA1

    7ca3ff6a175a7eda1468e2a1fffe315d06fb7fc7

  • SHA256

    ddfdea201fe17ea90bee5794596bda9e474186fe898d8da90b82d97da721bbcb

  • SHA512

    68ebd4f23a31a01043255d457066c28318e4e64b2aab94b7c305bd0aec78ea8d4d5933fab50edfa3d596c84032af260a22b91886c38b21b58b60808e879e1421

  • SSDEEP

    1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8asUsJOVYd7n97n+tG:fnyiQSohsUsKY5Z+tG

Score
9/10

Malware Config

Signatures

  • Renames multiple (5039) files with added filename extension

    This suggests ransomware activity of encrypting all the files on the system.

  • UPX packed file 4 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Drops file in Program Files directory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ddfdea201fe17ea90bee5794596bda9e474186fe898d8da90b82d97da721bbcb.exe
    "C:\Users\Admin\AppData\Local\Temp\ddfdea201fe17ea90bee5794596bda9e474186fe898d8da90b82d97da721bbcb.exe"
    1⤵
    • Drops file in Program Files directory
    PID:2608

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\$Recycle.Bin\S-1-5-21-2080292272-204036150-2159171770-1000\desktop.ini.tmp

    Filesize

    97KB

    MD5

    62ceaf38f68faef14b676552f479ed47

    SHA1

    00b6217f68bf11549843315508b518d5b8fd718e

    SHA256

    e73fbe31de92e2b6516e27d07fb1d7edf07ab87095e37845ddc7038e947235ea

    SHA512

    9729100b8bea31c707a26e06a8c356afff2fa8b762b59ac44022166f0419977eb0d458467b5a948f3f41711b65ec32285abc44ff20216c5de06d312d4b7e2c34

  • C:\Program Files\7-Zip\7-zip.dll.tmp

    Filesize

    196KB

    MD5

    ab7fee7e1a874e1d78cf5021dc398ffe

    SHA1

    3cfae848440e89b5208b107c7f332b55d37b007a

    SHA256

    31d3b71f84736567da2ab89b3a85c4fbb58bf15ac3554be51c34e0f62c7fdb0e

    SHA512

    8a1809a180a21843fcf79890186655755c0f252842da79fc44ae1693fdf203c3e5825a88d9ac96e764b7ee49537d087d84aeb4e495465e5fed399f15abf69e98

  • memory/2608-0-0x0000000000400000-0x000000000040B000-memory.dmp

    Filesize

    44KB

  • memory/2608-1846-0x0000000000400000-0x000000000040B000-memory.dmp

    Filesize

    44KB