Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    16s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    21/07/2024, 17:35

General

  • Target

    f52c01bea7ead4b6eaa6498576294540N.exe

  • Size

    270KB

  • MD5

    f52c01bea7ead4b6eaa6498576294540

  • SHA1

    fa666acd8cedf975617258b2b3a378b0b304df6c

  • SHA256

    55de429ca7e826eff2525cac4769896b2afe26c3cb5fb8b364665d06e551069e

  • SHA512

    2c0f7b8dd654fddb1cdbd09e11458f52f264be0545f64b94326a39f1d5077927b30cf52fb224a6b556303dc8b28eada51dec7bb3a8dbead5f2aad0fa7b9ff966

  • SSDEEP

    6144:RqBAIuZAIuDMVtM/8aB6Up31XnSUJdrIP4z:CAIuZAIuO/6lXtrIg

Score
9/10

Malware Config

Signatures

  • Renames multiple (2170) files with added filename extension

    This suggests ransomware activity of encrypting all the files on the system.

  • Drops file in Program Files directory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\f52c01bea7ead4b6eaa6498576294540N.exe
    "C:\Users\Admin\AppData\Local\Temp\f52c01bea7ead4b6eaa6498576294540N.exe"
    1⤵
    • Drops file in Program Files directory
    PID:2996

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\$Recycle.Bin\S-1-5-21-2958949473-3205530200-1453100116-1000\desktop.ini.tmp

    Filesize

    270KB

    MD5

    ad64d152c504f69f1bced92bfb864165

    SHA1

    105e23505f74341aa3f763fc1abe775e77f1b7c7

    SHA256

    4add229dd7edac1875c037fd4017c7d253a8c0318ed3eb61287f5808c35eb20d

    SHA512

    a6f4f52f239b77b245f03493fa07d00799c3e427161b70457cdcdb1589c3aa92e819c02b00295613dcfb4e1183e82e06e0c1ee45e386fa596ff4b4f264466a74

  • C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\Office64WW.xml.tmp

    Filesize

    279KB

    MD5

    6a8eae7f8cae391d2d66deb794314711

    SHA1

    f3562d5cc0f9782389edda970c5fec8304a4cde8

    SHA256

    3abae7de2c0c56fcad316da35221b8d1bf99c8cd3f0848e0730e35369d7bb66e

    SHA512

    779c4db28a452f9ab3a5420867bff30ee78a81ca1339c5d7c7466581ae46441b89b7b5b2f15a30777b31b1637e1d9a59ffa2a2646aa69772c5174e7b99b35193