Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

2024-07-06...re.exe

windows7-x64

1

2024-07-06...re.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    149s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240704-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system
  • submitted
    06/07/2024, 13:04

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2024-07-06_ea08eb8263b0a927c317ef9f893df505_bkransomware.exe

  • Size

    2.4MB

  • MD5

    ea08eb8263b0a927c317ef9f893df505

  • SHA1

    3acbc39b89bcdbd185009782f059ada80dd629c2

  • SHA256

    a315fd09f58778e4da467922b5c3886e7a47a0bdb63447a4814d0286d1b2111d

  • SHA512

    5ac370acaaa94194eb337fefe3ed1edd90066da5ac522ad507231a8e876c0673ef4ef0e311b7ac861ff8ddb54262655924d5796ec44da990df28e1a7db3cf75f

  • SSDEEP

    49152:vJ/b2wUY8UkmU1EvZzxKExk2GmjRI6s0jBF7itt0ZUxA2bPgYWAKLN:hid1QZlKExfGwa6s0jr7itt0ZUxA2b/n

Score
1/10

Malware Config

Signatures

  • Suspicious use of FindShellTrayWindow 20 IoCs
  • Suspicious use of SendNotifyMessage 20 IoCs
  • Suspicious use of SetWindowsHookEx 5 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-07-06_ea08eb8263b0a927c317ef9f893df505_bkransomware.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-07-06_ea08eb8263b0a927c317ef9f893df505_bkransomware.exe"
    1⤵
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:5024

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads