Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    100s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    21/07/2024, 03:48

General

  • Target

    5ebedd523dfab739490299f54a0ea010N.exe

  • Size

    44KB

  • MD5

    5ebedd523dfab739490299f54a0ea010

  • SHA1

    1cae87495d393701cff3d13b4b993a6c77d7e7f4

  • SHA256

    d6dc93bad0dbb6a767df7092ee0a39010c026a7a939cdc98ef267d3466704607

  • SHA512

    e2e0681de5d31eb7b8b6e2ee542623cea45b4d2626895ab6f5514826e0cf002c65c975de8810e9a41e949564b137ee83b366a4a982571a1784c13a1942584445

  • SSDEEP

    768:W7BlpppARFbhHFoqAJwBqAJwNqikTqikW:W7ZppApyqikTqikW

Score
9/10

Malware Config

Signatures

  • Renames multiple (4579) files with added filename extension

    This suggests ransomware activity of encrypting all the files on the system.

  • Drops file in Program Files directory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\5ebedd523dfab739490299f54a0ea010N.exe
    "C:\Users\Admin\AppData\Local\Temp\5ebedd523dfab739490299f54a0ea010N.exe"
    1⤵
    • Drops file in Program Files directory
    PID:2040

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\$Recycle.Bin\S-1-5-21-1176886754-713327781-2233697964-1000\desktop.ini.tmp

    Filesize

    45KB

    MD5

    27d8af347416a643d82e1273fc042614

    SHA1

    6d67429d6389f4e934a30e17f2c3cab3a73c65e6

    SHA256

    2efe8ed5ce1d78f4705ecb1d7c94d5846891ddb9573ba3e5763dcd092f6af546

    SHA512

    d0ead49748e9980714f0a6fe32eed1b81947bc047a06bc5a488bcfcb7fd6008390ba496ce2247d85fe2cebb271e1ce03ca4790ff718732db3f211f3faeb9404e

  • C:\Program Files\7-Zip\7-zip.dll.tmp

    Filesize

    143KB

    MD5

    957243730c09449ec31ab63842fbc3cb

    SHA1

    8dfbb8fc196bc9a84f515589840b045d2faf917a

    SHA256

    c082cb1cfd2fc02f807199e47b6a70478749e6068ddf4f0c847b26c60e0cb5ab

    SHA512

    ee62a94c7125bfafdd6a70f8c59c26dc2ba72aeada067e293d571f5ea149dc594cf7c5e0212efa293b8d3ede2b883f9a2c6d7aa8ec589c496a1cfcd5ceef0942