Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    106s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    20/07/2024, 02:54

General

  • Target

    3eed433d4305dde27c0b550ba5861850N.exe

  • Size

    35KB

  • MD5

    3eed433d4305dde27c0b550ba5861850

  • SHA1

    3972134a9274be1f143a6d1d1fa1b588ff418c38

  • SHA256

    1c17369934992ba3332b0c76cb3cb33b69b3c1c8b14ee7df4b9d6514e53052cc

  • SHA512

    5aa82f1f9ef55ed3713197d76326483d438f9867752d00f685261c4a003a1f1da00581422d4535ddee5ff51562e238ed0c2be8bbcb2d9fd1cc012257b40f0cbd

  • SSDEEP

    384:GBt7Br5xjL9AgA71FbhvuNBNhcj7joTyP2TyPf:W7BlpppARFbhDPrPf

Score
9/10

Malware Config

Signatures

  • Renames multiple (4618) files with added filename extension

    This suggests ransomware activity of encrypting all the files on the system.

  • Drops file in Program Files directory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\3eed433d4305dde27c0b550ba5861850N.exe
    "C:\Users\Admin\AppData\Local\Temp\3eed433d4305dde27c0b550ba5861850N.exe"
    1⤵
    • Drops file in Program Files directory
    PID:4392

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\$Recycle.Bin\S-1-5-21-2990742725-2267136959-192470804-1000\desktop.ini.tmp

    Filesize

    35KB

    MD5

    36d0086a67260363d9faa2894938c3be

    SHA1

    4b828c13bd33b223db16600fe3455583cd751f94

    SHA256

    12a3b7859efa8d013b6c76b66f3c75188b1dbc5fbf12506af903ff9ce42d2460

    SHA512

    e8f253a9545e3f26fb0b9fd48a2cf9a5dc1c32f31134b564f94e7008522103c200125018452662917d3bfef79d6f59597dfa76570671d46ad5e42f53572b81aa

  • C:\Program Files\7-Zip\7-zip.dll.tmp

    Filesize

    134KB

    MD5

    824e89ab8a7207fdd36b966dfc1c365a

    SHA1

    e72944bc2fd5e9a60ced64db26268ae72496ff3c

    SHA256

    5b50785f44bf7dc9a75964d13eb992591d51abefafc7d7f942f5f7e3c81d0064

    SHA512

    270aff6adec13f6bf989ab9badf33cd5d9237ad62349b3c3d858c813f921e8008a32a212506e8b577c1c42def4d41a5ecc40afc2f57788ca5e4490a47789b040