Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    101s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    14/07/2024, 21:55

General

  • Target

    2a74cfe0f69b98c3db124ba4afaf8fa0N.exe

  • Size

    74KB

  • MD5

    2a74cfe0f69b98c3db124ba4afaf8fa0

  • SHA1

    31c52cca2deff9b8db4ed6ee66ae949a1c62c7e8

  • SHA256

    776b9990b6bda6227288f24f0323c98a0b83720eea0f3a395bf51dc11ad5824d

  • SHA512

    af878c9aad131108f9bbdf2ee058f9d6720be5286f041416e0c187f7cc8f77e85c8dc9dea686b5440379e656fcc5cd1a975bb4c05e126ad60d880e0ce1192908

  • SSDEEP

    1536:W7ZDpApYbWjIoPyPoLzV7c6ShZJ99J9ks:6DWprs

Score
9/10

Malware Config

Signatures

  • Renames multiple (4365) files with added filename extension

    This suggests ransomware activity of encrypting all the files on the system.

  • Drops file in Program Files directory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2a74cfe0f69b98c3db124ba4afaf8fa0N.exe
    "C:\Users\Admin\AppData\Local\Temp\2a74cfe0f69b98c3db124ba4afaf8fa0N.exe"
    1⤵
    • Drops file in Program Files directory
    PID:4572

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\$Recycle.Bin\S-1-5-21-2636447293-1148739154-93880854-1000\desktop.ini.tmp

    Filesize

    75KB

    MD5

    131f9ee3f03a3abcfffc995103623f3d

    SHA1

    8d1cbb12cf71cbd325f4015d754f2cf01d54ce46

    SHA256

    4cba9700c32ad96635c6549c80841f85510102217d504c1a100f4dc057786bb0

    SHA512

    26a3e50b24bb6b310c83af2f44e9b484f639601748053b7dd0479846e9b957aebff499932eec5d6478306e04aa84f5b86365a6c790d8b56de829148189b132ab

  • C:\Program Files\7-Zip\7-zip.dll.tmp

    Filesize

    173KB

    MD5

    685479a3605be967ed4c37d97860d9bf

    SHA1

    ef65d9da93c995b67096bf36c64a04f56eadb5e2

    SHA256

    d00d56595e037e5160907dd14c1bc05c599513adbf8327fecff02b566bbb5c70

    SHA512

    3e652f37eba03affb003aed9f3aa391946d20df6c0fee488768618d1bde09bd2b67ae288d43c39b5849cc14cd0dcadaae60a2a19872fe9debd95e939e4f6ee5c