Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
120s -
max time network
16s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
21/07/2024, 17:35
Static task
static1
Behavioral task
behavioral1
Sample
f52c01bea7ead4b6eaa6498576294540N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
f52c01bea7ead4b6eaa6498576294540N.exe
Resource
win10v2004-20240709-en
General
-
Target
f52c01bea7ead4b6eaa6498576294540N.exe
-
Size
270KB
-
MD5
f52c01bea7ead4b6eaa6498576294540
-
SHA1
fa666acd8cedf975617258b2b3a378b0b304df6c
-
SHA256
55de429ca7e826eff2525cac4769896b2afe26c3cb5fb8b364665d06e551069e
-
SHA512
2c0f7b8dd654fddb1cdbd09e11458f52f264be0545f64b94326a39f1d5077927b30cf52fb224a6b556303dc8b28eada51dec7bb3a8dbead5f2aad0fa7b9ff966
-
SSDEEP
6144:RqBAIuZAIuDMVtM/8aB6Up31XnSUJdrIP4z:CAIuZAIuO/6lXtrIg
Malware Config
Signatures
-
Renames multiple (2170) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
Drops file in Program Files directory 64 IoCs
description ioc Process File created C:\Program Files\Common Files\System\ado\msader15.dll.tmp f52c01bea7ead4b6eaa6498576294540N.exe File created C:\Program Files\Java\jdk1.7.0_80\include\win32\jawt_md.h.tmp f52c01bea7ead4b6eaa6498576294540N.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT+11.tmp f52c01bea7ead4b6eaa6498576294540N.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-templates_ja.jar.tmp f52c01bea7ead4b6eaa6498576294540N.exe File created C:\Program Files\Java\jdk1.7.0_80\bin\jvisualvm.exe.tmp f52c01bea7ead4b6eaa6498576294540N.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-keyring-fallback_ja.jar.tmp f52c01bea7ead4b6eaa6498576294540N.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\update_tracking\org-netbeans-lib-profiler-charts.xml.tmp f52c01bea7ead4b6eaa6498576294540N.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-attach.xml.tmp f52c01bea7ead4b6eaa6498576294540N.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Argentina\Rio_Gallegos.tmp f52c01bea7ead4b6eaa6498576294540N.exe File created C:\Program Files\7-Zip\Lang\an.txt.tmp f52c01bea7ead4b6eaa6498576294540N.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\fr-FR\TipRes.dll.mui.tmp f52c01bea7ead4b6eaa6498576294540N.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\symbols\ja-jp-sym.xml.tmp f52c01bea7ead4b6eaa6498576294540N.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Copenhagen.tmp f52c01bea7ead4b6eaa6498576294540N.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.jface.databinding.nl_ja_4.4.0.v20140623020002.jar.tmp f52c01bea7ead4b6eaa6498576294540N.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainToNotesBackground_PAL.wmv.tmp f52c01bea7ead4b6eaa6498576294540N.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\ext\zipfs.jar.tmp f52c01bea7ead4b6eaa6498576294540N.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-keyring-impl_zh_CN.jar.tmp f52c01bea7ead4b6eaa6498576294540N.exe File created C:\Program Files\7-Zip\Lang\fur.txt.tmp f52c01bea7ead4b6eaa6498576294540N.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\bear_formatted_rgb6.wmv.tmp f52c01bea7ead4b6eaa6498576294540N.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\com.jrockit.mc.feature.rcp.ja_5.5.0.165303\feature.xml.tmp f52c01bea7ead4b6eaa6498576294540N.exe File created C:\Program Files\ApproveWait.html.tmp f52c01bea7ead4b6eaa6498576294540N.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Santo_Domingo.tmp f52c01bea7ead4b6eaa6498576294540N.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\leftnav.gif.tmp f52c01bea7ead4b6eaa6498576294540N.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-keyring-impl_ja.jar.tmp f52c01bea7ead4b6eaa6498576294540N.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\EET.tmp f52c01bea7ead4b6eaa6498576294540N.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.workbench.nl_ja_4.4.0.v20140623020002.jar.tmp f52c01bea7ead4b6eaa6498576294540N.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\deploy.jar.tmp f52c01bea7ead4b6eaa6498576294540N.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Marquesas.tmp f52c01bea7ead4b6eaa6498576294540N.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\selection_subpicture.png.tmp f52c01bea7ead4b6eaa6498576294540N.exe File created C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe.tmp f52c01bea7ead4b6eaa6498576294540N.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Blanc-Sablon.tmp f52c01bea7ead4b6eaa6498576294540N.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-openide-text.jar.tmp f52c01bea7ead4b6eaa6498576294540N.exe File created C:\Program Files\Java\jre7\lib\deploy\messages_zh_HK.properties.tmp f52c01bea7ead4b6eaa6498576294540N.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\Notes_content-background.png.tmp f52c01bea7ead4b6eaa6498576294540N.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.common_2.10.1.v20140901-1043\META-INF\ECLIPSE_.RSA.tmp f52c01bea7ead4b6eaa6498576294540N.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.director.app.nl_zh_4.4.0.v20140623020002.jar.tmp f52c01bea7ead4b6eaa6498576294540N.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-threaddump_zh_CN.jar.tmp f52c01bea7ead4b6eaa6498576294540N.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\NavigationRight_ButtonGraphic.png.tmp f52c01bea7ead4b6eaa6498576294540N.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\bin\jp2iexp.dll.tmp f52c01bea7ead4b6eaa6498576294540N.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\schema\com.jrockit.mc.rjmx.service.exsd.tmp f52c01bea7ead4b6eaa6498576294540N.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-swing-plaf.xml.tmp f52c01bea7ead4b6eaa6498576294540N.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\userContent_16x9_imagemask.png.tmp f52c01bea7ead4b6eaa6498576294540N.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\bin\JAWTAccessBridge-64.dll.tmp f52c01bea7ead4b6eaa6498576294540N.exe File created C:\Program Files\Java\jre7\lib\logging.properties.tmp f52c01bea7ead4b6eaa6498576294540N.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.widgets_1.0.0.v20140514-1823.jar.tmp f52c01bea7ead4b6eaa6498576294540N.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\dark\e4-dark_partstyle.css.tmp f52c01bea7ead4b6eaa6498576294540N.exe File created C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll.tmp f52c01bea7ead4b6eaa6498576294540N.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\ipssrl.xml.tmp f52c01bea7ead4b6eaa6498576294540N.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\button-highlight.png.tmp f52c01bea7ead4b6eaa6498576294540N.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\artifacts.xml.tmp f52c01bea7ead4b6eaa6498576294540N.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rcp.application.zh_CN_5.5.0.165303.jar.tmp f52c01bea7ead4b6eaa6498576294540N.exe File created C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\gu.pak.tmp f52c01bea7ead4b6eaa6498576294540N.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.workbench.renderers.swt.nl_ja_4.4.0.v20140623020002.jar.tmp f52c01bea7ead4b6eaa6498576294540N.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler-oql_zh_CN.jar.tmp f52c01bea7ead4b6eaa6498576294540N.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Full\1047x576black.png.tmp f52c01bea7ead4b6eaa6498576294540N.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\HST.tmp f52c01bea7ead4b6eaa6498576294540N.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Luxembourg.tmp f52c01bea7ead4b6eaa6498576294540N.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-options-keymap_zh_CN.jar.tmp f52c01bea7ead4b6eaa6498576294540N.exe File created C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\1033\VSTOInstallerUI.dll.tmp f52c01bea7ead4b6eaa6498576294540N.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\bin\plugin2\npjp2.dll.tmp f52c01bea7ead4b6eaa6498576294540N.exe File created C:\Program Files\7-Zip\Lang\gl.txt.tmp f52c01bea7ead4b6eaa6498576294540N.exe File created C:\Program Files\7-Zip\Lang\hr.txt.tmp f52c01bea7ead4b6eaa6498576294540N.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.flightrecorder_5.5.0.165303.jar.tmp f52c01bea7ead4b6eaa6498576294540N.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-openide-explorer.xml.tmp f52c01bea7ead4b6eaa6498576294540N.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
270KB
MD5ad64d152c504f69f1bced92bfb864165
SHA1105e23505f74341aa3f763fc1abe775e77f1b7c7
SHA2564add229dd7edac1875c037fd4017c7d253a8c0318ed3eb61287f5808c35eb20d
SHA512a6f4f52f239b77b245f03493fa07d00799c3e427161b70457cdcdb1589c3aa92e819c02b00295613dcfb4e1183e82e06e0c1ee45e386fa596ff4b4f264466a74
-
Filesize
279KB
MD56a8eae7f8cae391d2d66deb794314711
SHA1f3562d5cc0f9782389edda970c5fec8304a4cde8
SHA2563abae7de2c0c56fcad316da35221b8d1bf99c8cd3f0848e0730e35369d7bb66e
SHA512779c4db28a452f9ab3a5420867bff30ee78a81ca1339c5d7c7466581ae46441b89b7b5b2f15a30777b31b1637e1d9a59ffa2a2646aa69772c5174e7b99b35193