Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    18s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    14/07/2024, 21:55

General

  • Target

    2a74cfe0f69b98c3db124ba4afaf8fa0N.exe

  • Size

    74KB

  • MD5

    2a74cfe0f69b98c3db124ba4afaf8fa0

  • SHA1

    31c52cca2deff9b8db4ed6ee66ae949a1c62c7e8

  • SHA256

    776b9990b6bda6227288f24f0323c98a0b83720eea0f3a395bf51dc11ad5824d

  • SHA512

    af878c9aad131108f9bbdf2ee058f9d6720be5286f041416e0c187f7cc8f77e85c8dc9dea686b5440379e656fcc5cd1a975bb4c05e126ad60d880e0ce1192908

  • SSDEEP

    1536:W7ZDpApYbWjIoPyPoLzV7c6ShZJ99J9ks:6DWprs

Score
9/10

Malware Config

Signatures

  • Renames multiple (3227) files with added filename extension

    This suggests ransomware activity of encrypting all the files on the system.

  • Drops file in Program Files directory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2a74cfe0f69b98c3db124ba4afaf8fa0N.exe
    "C:\Users\Admin\AppData\Local\Temp\2a74cfe0f69b98c3db124ba4afaf8fa0N.exe"
    1⤵
    • Drops file in Program Files directory
    PID:2368

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\$Recycle.Bin\S-1-5-21-3502430532-24693940-2469786940-1000\desktop.ini.tmp

    Filesize

    75KB

    MD5

    5840a3992ea818e60f8220eece791a23

    SHA1

    1d0b1e537de76043f985800d4069e31212d75bd4

    SHA256

    e87a7370363fc869d06c09b4213768f747aa663790e4448546617330bcc755f1

    SHA512

    854145f72500349fc428c2edf0d284686db4fb4f96a3053c1cccdd3f84861395ccfd0b8cd66904e912c01da3e59a35aa6da69c8594ea43a24219de9412f5eb20

  • C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\Office64WW.xml.tmp

    Filesize

    83KB

    MD5

    ceba068c618f7fad0560ca5e602c0808

    SHA1

    d0865d35486c522c238e1bf55833aeebe93de8fa

    SHA256

    dab9fca1734bc81f9cfe38ecf648b603c98f92b73bfc6e9dd49523a1a7a618ee

    SHA512

    c2d9c35373d92c69b88e69927e2baa0a84c1242d607ffd5b625345c0973947e1e519d1300f4d88a13514357e203a64cecdd0318ce5ef4eabd9fcc8ce13ee01fa