Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    17s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    21/07/2024, 03:48

General

  • Target

    5ebedd523dfab739490299f54a0ea010N.exe

  • Size

    44KB

  • MD5

    5ebedd523dfab739490299f54a0ea010

  • SHA1

    1cae87495d393701cff3d13b4b993a6c77d7e7f4

  • SHA256

    d6dc93bad0dbb6a767df7092ee0a39010c026a7a939cdc98ef267d3466704607

  • SHA512

    e2e0681de5d31eb7b8b6e2ee542623cea45b4d2626895ab6f5514826e0cf002c65c975de8810e9a41e949564b137ee83b366a4a982571a1784c13a1942584445

  • SSDEEP

    768:W7BlpppARFbhHFoqAJwBqAJwNqikTqikW:W7ZppApyqikTqikW

Score
9/10

Malware Config

Signatures

  • Renames multiple (3328) files with added filename extension

    This suggests ransomware activity of encrypting all the files on the system.

  • Drops file in Program Files directory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\5ebedd523dfab739490299f54a0ea010N.exe
    "C:\Users\Admin\AppData\Local\Temp\5ebedd523dfab739490299f54a0ea010N.exe"
    1⤵
    • Drops file in Program Files directory
    PID:2756

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\$Recycle.Bin\S-1-5-21-2958949473-3205530200-1453100116-1000\desktop.ini.tmp

    Filesize

    45KB

    MD5

    6cb9acd31f5121785f5562c70cf06253

    SHA1

    4e3d453b5e6c663ee64953879c520dc39ab76f32

    SHA256

    b7d6e0f1f08cf072448cfaa2c35ded29aa8ee652b83be3b9acf07d7ee3578369

    SHA512

    30354ccc75198946fdcf8ae87a21d6849006fc69c17498ece57c665c7935c6cbde8b5746c236d01980b25a898462bfa01971490ad569da66b087b6a6775ffb28

  • C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\Office64WW.xml.tmp

    Filesize

    53KB

    MD5

    5611bf157c3b5443ad3537e711ee6d4d

    SHA1

    a357f2d4018e1d1d0bbc362999794c60b4a15914

    SHA256

    52bcdb7043dcdab90502846fc5d65ad2bd1cc9bfae7438da2eacc32220df11d0

    SHA512

    bd33ed5c196318bcac3ea9ece15f48f0e0b5c537088c953eae93a92ac128924a08f73e167710eb3ffd8c9461dfd1240888c6138344f3d4446005cbdc9c77e0ce