Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    150s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30/06/2024, 03:30

General

  • Target

    f0dd76470f64ccd1863f43dea11c4f12ba3166281740498a02c27c99896b9e62.exe

  • Size

    40KB

  • MD5

    8c2fe824b6b5ee050d81507b02f97110

  • SHA1

    b1e6763ad3f140e56088c58f8bbe8982cb09968a

  • SHA256

    f0dd76470f64ccd1863f43dea11c4f12ba3166281740498a02c27c99896b9e62

  • SHA512

    48cca98bdf76d04e6fecbdd5dd8c708b44ae636c334d54dacda213b92fe5065b7923b139df46ce977f98fc86a05840545c693096bb99b782d7342cbc266ed2ec

  • SSDEEP

    768:W7BlpppARFbhbt7Y7FoICOiJfoICOiJQ444Zqi:W7ZppApWmjXU

Score
9/10

Malware Config

Signatures

  • Renames multiple (5286) files with added filename extension

    This suggests ransomware activity of encrypting all the files on the system.

  • Drops file in Program Files directory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\f0dd76470f64ccd1863f43dea11c4f12ba3166281740498a02c27c99896b9e62.exe
    "C:\Users\Admin\AppData\Local\Temp\f0dd76470f64ccd1863f43dea11c4f12ba3166281740498a02c27c99896b9e62.exe"
    1⤵
    • Drops file in Program Files directory
    PID:3780

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\$Recycle.Bin\S-1-5-21-2804150937-2146708401-419095071-1000\desktop.ini.tmp

    Filesize

    40KB

    MD5

    159bc78b428680d72a7a2211451053f5

    SHA1

    488ab6e048ad8247df0c7087062f58c564f792b0

    SHA256

    4738bf0b430e3aa4db9adc4c13cfa37c009d6e080c7b6610afe68a6581661d94

    SHA512

    ed8d8ff11aec371bc31e3896b4835d5caa509ca388e0ca62c182c796e29603613b6f3f8289c0d602a88109cc8dd67571c28c6cbeae4ee95484c57d6d843da60f

  • C:\Program Files\7-Zip\7-zip.dll.tmp

    Filesize

    139KB

    MD5

    47ea614599b6ae15f4aef98ce3211509

    SHA1

    3ca8c14d75c27d6ac5c0e2cbbdc53f9f83be8de3

    SHA256

    e8e5ab1297aee46d3376b3299838967dec31e8ee043483d5506f67761d9bb6db

    SHA512

    98a59dd6eb75f67ff329b5bbfe25f05b9f5d03a2f581f3d539dbcad01f65f1aaffa89f6beb37d990415f261cc42bdf6c5d25e34ccbcdab7d96d28504a7eab658