Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    150s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    01/07/2024, 18:07

General

  • Target

    00839d3de738609935e950b097327d26280698ec2550c08b8e1b633fdb4563d4.exe

  • Size

    45KB

  • MD5

    87ffab747657202b841361ab7eb7d982

  • SHA1

    06355b2b6aa8a346d7697f7fe3bf55aa267eaf4b

  • SHA256

    00839d3de738609935e950b097327d26280698ec2550c08b8e1b633fdb4563d4

  • SHA512

    195ef9219e4c9641b4ec232cdba84fcaa6045c0afc9a4773de86ab49773ac2e30e433120b8b71b73eb77c227a37e12dac68ae29384bbcc9cd34644b225475abf

  • SSDEEP

    384:GBt7Br5xjLMuLAgA71FbhvDl3DG71ul3DG71XUmUIYFAHssMzMss7sxyZsTZX:W7BlpNLpARFbhblkYlkuvIYFdHYyld

Score
9/10

Malware Config

Signatures

  • Renames multiple (3557) files with added filename extension

    This suggests ransomware activity of encrypting all the files on the system.

  • Drops file in Program Files directory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\00839d3de738609935e950b097327d26280698ec2550c08b8e1b633fdb4563d4.exe
    "C:\Users\Admin\AppData\Local\Temp\00839d3de738609935e950b097327d26280698ec2550c08b8e1b633fdb4563d4.exe"
    1⤵
    • Drops file in Program Files directory
    PID:2916

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\$Recycle.Bin\S-1-5-21-2721934792-624042501-2768869379-1000\desktop.ini.tmp

    Filesize

    45KB

    MD5

    af9ad5db09bc0f1fa19184bfacc9615a

    SHA1

    0447f0501a938637efa1818146f455593a8687a4

    SHA256

    06a46bd46348141461717462e26a99ddecae69dba53f68108036ac22ba86e9eb

    SHA512

    7cb17a3ace1d2ad57be198d6f194e141eb8b6a749059036fe81b7fc929d4d46e01fafe8a9631ebb7e4e131f302e8ac8bc61ed49ce8ff3d4d3408fdde0fff59a0

  • C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\Office64WW.xml.tmp

    Filesize

    54KB

    MD5

    d84b85bb7bde5e8931bdd5a3142d93f1

    SHA1

    3febdb0a40fd0e0248c13ccbfc820f1f36638052

    SHA256

    8487196e78d01f6881f78c8430c5b7f240d7b801184548e7986af007be8590e6

    SHA512

    b4d3c1a6974edaf4bc519168b7bdd1665ec78864162ade11dc863115b700bd5ae778e60c02668fc03ae1b8b9e9c281a06b5742c4c244d0fa583672e368ce6110