Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
120s -
max time network
18s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
20/07/2024, 02:54
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
3eed433d4305dde27c0b550ba5861850N.exe
Resource
win7-20240704-en
windows7-x64
2 signatures
120 seconds
Behavioral task
behavioral2
Sample
3eed433d4305dde27c0b550ba5861850N.exe
Resource
win10v2004-20240709-en
windows10-2004-x64
2 signatures
120 seconds
General
-
Target
3eed433d4305dde27c0b550ba5861850N.exe
-
Size
35KB
-
MD5
3eed433d4305dde27c0b550ba5861850
-
SHA1
3972134a9274be1f143a6d1d1fa1b588ff418c38
-
SHA256
1c17369934992ba3332b0c76cb3cb33b69b3c1c8b14ee7df4b9d6514e53052cc
-
SHA512
5aa82f1f9ef55ed3713197d76326483d438f9867752d00f685261c4a003a1f1da00581422d4535ddee5ff51562e238ed0c2be8bbcb2d9fd1cc012257b40f0cbd
-
SSDEEP
384:GBt7Br5xjL9AgA71FbhvuNBNhcj7joTyP2TyPf:W7BlpppARFbhDPrPf
Score
9/10
Malware Config
Signatures
-
Renames multiple (332) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
Drops file in Program Files directory 64 IoCs
description ioc Process File created C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\NavigationUp_ButtonGraphic.png.tmp 3eed433d4305dde27c0b550ba5861850N.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\de-DE\ShapeCollector.exe.mui.tmp 3eed433d4305dde27c0b550ba5861850N.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\TipRes.dll.tmp 3eed433d4305dde27c0b550ba5861850N.exe File created C:\Program Files\Common Files\System\ado\msadox.dll.tmp 3eed433d4305dde27c0b550ba5861850N.exe File created C:\Program Files\DVD Maker\directshowtap.ax.tmp 3eed433d4305dde27c0b550ba5861850N.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\play-static.png.tmp 3eed433d4305dde27c0b550ba5861850N.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\OldAge\NavigationUp_ButtonGraphic.png.tmp 3eed433d4305dde27c0b550ba5861850N.exe File created C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Csi.dll.tmp 3eed433d4305dde27c0b550ba5861850N.exe File created C:\Program Files\Common Files\System\ado\en-US\msader15.dll.mui.tmp 3eed433d4305dde27c0b550ba5861850N.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\de-DE\TipBand.dll.mui.tmp 3eed433d4305dde27c0b550ba5861850N.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\ru-RU\tipresx.dll.mui.tmp 3eed433d4305dde27c0b550ba5861850N.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\ipsjpn.xml.tmp 3eed433d4305dde27c0b550ba5861850N.exe File created C:\Program Files\Common Files\System\Ole DB\msdasqlr.dll.tmp 3eed433d4305dde27c0b550ba5861850N.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\NextMenuButtonIcon.png.tmp 3eed433d4305dde27c0b550ba5861850N.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\PreviousMenuButtonIconSubpi.png.tmp 3eed433d4305dde27c0b550ba5861850N.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\CircleSubpicture.png.tmp 3eed433d4305dde27c0b550ba5861850N.exe File created C:\Program Files\7-Zip\Lang\be.txt.tmp 3eed433d4305dde27c0b550ba5861850N.exe File created C:\Program Files\7-Zip\Lang\yo.txt.tmp 3eed433d4305dde27c0b550ba5861850N.exe File created C:\Program Files\Common Files\Microsoft Shared\Stationery\Pine_Lumber.jpg.tmp 3eed433d4305dde27c0b550ba5861850N.exe File created C:\Program Files\Common Files\System\msadc\es-ES\msdaremr.dll.mui.tmp 3eed433d4305dde27c0b550ba5861850N.exe File created C:\Program Files\Common Files\System\msadc\msdaremr.dll.tmp 3eed433d4305dde27c0b550ba5861850N.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\4to3Squareframe_Buttongraphic.png.tmp 3eed433d4305dde27c0b550ba5861850N.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Vignette\NavigationLeft_ButtonGraphic.png.tmp 3eed433d4305dde27c0b550ba5861850N.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\hwrespsh.dat.tmp 3eed433d4305dde27c0b550ba5861850N.exe File created C:\Program Files\Common Files\Microsoft Shared\OFFICE14\msoshext.dll.tmp 3eed433d4305dde27c0b550ba5861850N.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\OldAge\15x15dot.png.tmp 3eed433d4305dde27c0b550ba5861850N.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\ParentMenuButtonIcon.png.tmp 3eed433d4305dde27c0b550ba5861850N.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Stacking\15x15dot.png.tmp 3eed433d4305dde27c0b550ba5861850N.exe File created C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\te.pak.tmp 3eed433d4305dde27c0b550ba5861850N.exe File created C:\Program Files\7-Zip\Lang\cs.txt.tmp 3eed433d4305dde27c0b550ba5861850N.exe File created C:\Program Files\Common Files\Microsoft Shared\Stationery\SoftBlue.jpg.tmp 3eed433d4305dde27c0b550ba5861850N.exe File created C:\Program Files\Common Files\Microsoft Shared\Stationery\Garden.htm.tmp 3eed433d4305dde27c0b550ba5861850N.exe File created C:\Program Files\Common Files\System\ado\msado21.tlb.tmp 3eed433d4305dde27c0b550ba5861850N.exe File created C:\Program Files\Internet Explorer\F12.dll.tmp 3eed433d4305dde27c0b550ba5861850N.exe File created C:\Program Files\7-Zip\Lang\sr-spc.txt.tmp 3eed433d4305dde27c0b550ba5861850N.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Full\pushplaysubpicture.png.tmp 3eed433d4305dde27c0b550ba5861850N.exe File created C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\ru.pak.tmp 3eed433d4305dde27c0b550ba5861850N.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\it-IT\InkObj.dll.mui.tmp 3eed433d4305dde27c0b550ba5861850N.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Vignette\vignettemask25.png.tmp 3eed433d4305dde27c0b550ba5861850N.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Scenes_INTRO_BG.wmv.tmp 3eed433d4305dde27c0b550ba5861850N.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Notes_INTRO_BG_PAL.wmv.tmp 3eed433d4305dde27c0b550ba5861850N.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-previous-over-select.png.tmp 3eed433d4305dde27c0b550ba5861850N.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\lt-LT\tipresx.dll.mui.tmp 3eed433d4305dde27c0b550ba5861850N.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\btn-previous-static.png.tmp 3eed433d4305dde27c0b550ba5861850N.exe File created C:\Program Files\Common Files\System\ado\it-IT\msader15.dll.mui.tmp 3eed433d4305dde27c0b550ba5861850N.exe File created C:\Program Files\Common Files\System\msadc\msadcf.dll.tmp 3eed433d4305dde27c0b550ba5861850N.exe File created C:\Program Files\Common Files\System\Ole DB\sqlxmlx.dll.tmp 3eed433d4305dde27c0b550ba5861850N.exe File created C:\Program Files\DVD Maker\Shared\DissolveNoise.png.tmp 3eed433d4305dde27c0b550ba5861850N.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\Notes_content-background.png.tmp 3eed433d4305dde27c0b550ba5861850N.exe File created C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\mr.pak.tmp 3eed433d4305dde27c0b550ba5861850N.exe File created C:\Program Files\7-Zip\Lang\bg.txt.tmp 3eed433d4305dde27c0b550ba5861850N.exe File created C:\Program Files\7-Zip\Lang\ky.txt.tmp 3eed433d4305dde27c0b550ba5861850N.exe File created C:\Program Files\AssertStart.mpeg.tmp 3eed433d4305dde27c0b550ba5861850N.exe File created C:\Program Files\Common Files\Microsoft Shared\Stationery\Green Bubbles.htm.tmp 3eed433d4305dde27c0b550ba5861850N.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\FlickAnimation.avi.tmp 3eed433d4305dde27c0b550ba5861850N.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyNotesBackground.wmv.tmp 3eed433d4305dde27c0b550ba5861850N.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\flower_PreComp_MATTE_PAL.wmv.tmp 3eed433d4305dde27c0b550ba5861850N.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\circle_glass_Thumbnail.bmp.tmp 3eed433d4305dde27c0b550ba5861850N.exe File created C:\Program Files\7-Zip\Lang\fa.txt.tmp 3eed433d4305dde27c0b550ba5861850N.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-split.avi.tmp 3eed433d4305dde27c0b550ba5861850N.exe File created C:\Program Files\Common Files\System\msadc\es-ES\msadcor.dll.mui.tmp 3eed433d4305dde27c0b550ba5861850N.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationRight_SelectionSubpicture.png.tmp 3eed433d4305dde27c0b550ba5861850N.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\1047x576_91n92.png.tmp 3eed433d4305dde27c0b550ba5861850N.exe File created C:\Program Files\Google\Chrome\Application\106.0.5249.119\Installer\chrmstp.exe.tmp 3eed433d4305dde27c0b550ba5861850N.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
35KB
MD5c063b7aadfc66b0c3be13e58b3e6f209
SHA1ede13d01685c38571e9ff66eb5d2d81ba4491c40
SHA256a87d8a584e4dbaadaad8dee9b1ee95ffed17905d69f442978b58f908e220999f
SHA5122b77edceba1d83775b992f562597ed037162c853678b4a716dbbe2e35f9e777d19950aba3ce82ac1fa8d5fea13ec2dddab0dd6b8011b2fa87e9acbbdc915127e
-
Filesize
44KB
MD549c33804009a43b12ee1920f839fca71
SHA1171b549bf7571fe3dab3f271427227cd8b67bb6c
SHA2566098af4634e8573f8d13004d1bc3367dbcbec51c5b969ecd0d73cf14b42d0fbe
SHA5127970d8af8e7cbfbfcca7c6debd8bd0e5d737792683bd560d39b16a3acaa13fb0a57b1b3385e185c6125e86a93aa9ef7c96bd04ad180009fedbac601bfa7e2302