Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    150s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    09/07/2024, 20:30

General

  • Target

    2ecb670edec0f2510a511c31f4464d4824623375234868165c26e67aa155a75f.exe

  • Size

    51KB

  • MD5

    be0be87b345bb13082632c2da0d9ca3f

  • SHA1

    ed5894a79e1edf94bdc30c1b4b98a5a8446389c7

  • SHA256

    2ecb670edec0f2510a511c31f4464d4824623375234868165c26e67aa155a75f

  • SHA512

    049976adf13f9e69e63d5ad23e96a17e3a698b9c60432cbd33e9614c27980a2b225e702d0c0126238202068281d74ec384049ba8cd2e3375cd01f2b6f14a6665

  • SSDEEP

    384:yBs7Br5xjL8AgA71FbhvgYJfPg7JDYJfPg7J8SqS9CDdeKCDdeO:/7BlpQpARFbhIYJIJDYJIJwd8dn

Score
9/10

Malware Config

Signatures

  • Renames multiple (3156) files with added filename extension

    This suggests ransomware activity of encrypting all the files on the system.

  • Drops file in Program Files directory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2ecb670edec0f2510a511c31f4464d4824623375234868165c26e67aa155a75f.exe
    "C:\Users\Admin\AppData\Local\Temp\2ecb670edec0f2510a511c31f4464d4824623375234868165c26e67aa155a75f.exe"
    1⤵
    • Drops file in Program Files directory
    PID:2692

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\$Recycle.Bin\S-1-5-21-2660163958-4080398480-1122754539-1000\desktop.ini.tmp

    Filesize

    52KB

    MD5

    8ee37ee25253b88a04be1ea9e0abef9a

    SHA1

    840ca530099241d2b8fd3b7e183c9cde2effa432

    SHA256

    2a23a531b240130b8ade9b1ada760e4e0cc61dff7b7341cd484415c35087bbba

    SHA512

    04d1ea8707c95c4912d29ffd9c8a5a896684578a34dd5cce969dcb304219da78e620ee957e8290651ed61e821bf3e3bb63e19679ddc6d7ea656ddafab7a6939f

  • C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\Office64WW.xml.tmp

    Filesize

    61KB

    MD5

    239272bf02c5565b35d1cd51bd02561d

    SHA1

    7e8da265277989cd3dca49f37fc21e1c2555e805

    SHA256

    c9a62fc9bb692a17d3b13bcdf1e89c8f66e5a888dd9e6b3a382f0739bfec20c5

    SHA512

    a67d9c012262051052bda47dc3580b0040b0e4f2120abbcaf027a1b6b78174508914ac7f613f04f099ba48b2f4a9a033eb9426afa692932c142a8409dba90ec4

  • memory/2692-0-0x0000000000400000-0x0000000000408000-memory.dmp

    Filesize

    32KB