Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
120s -
max time network
18s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
22/07/2024, 05:55
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
6ca24dc0cde4be96c24a3a5018568bf0N.exe
Resource
win7-20240704-en
windows7-x64
2 signatures
120 seconds
Behavioral task
behavioral2
Sample
6ca24dc0cde4be96c24a3a5018568bf0N.exe
Resource
win10v2004-20240704-en
windows10-2004-x64
2 signatures
120 seconds
General
-
Target
6ca24dc0cde4be96c24a3a5018568bf0N.exe
-
Size
60KB
-
MD5
6ca24dc0cde4be96c24a3a5018568bf0
-
SHA1
be1ed9e2f4f7f33d8207eb63075f92a824c3e8c4
-
SHA256
dee88ce6fb280781287bd189630a1b7fc3e01ecaf19d648938d0dbd12044382e
-
SHA512
c6c0c822ec863a3a9dec43bd81db7c82574749b238f5fc73fb995c86d7981ad6c3e5fadfa4a99ba71f6a6ceb6c63ace05ca87128884df61cf828e4a4b52f4bbd
-
SSDEEP
1536:W7ZppApwEwnmJARJAaXxXNJdkCKPuJdkCKPU:6pWpUnDXxX7
Score
9/10
Malware Config
Signatures
-
Renames multiple (327) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
Drops file in Program Files directory 64 IoCs
description ioc Process File created C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\title_stripe.png.tmp 6ca24dc0cde4be96c24a3a5018568bf0N.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\PassportMask_PAL.wmv.tmp 6ca24dc0cde4be96c24a3a5018568bf0N.exe File created C:\Program Files\Google\Chrome\Application\106.0.5249.119\libGLESv2.dll.tmp 6ca24dc0cde4be96c24a3a5018568bf0N.exe File created C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\ms.pak.tmp 6ca24dc0cde4be96c24a3a5018568bf0N.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\keypadbase.xml.tmp 6ca24dc0cde4be96c24a3a5018568bf0N.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskpred.xml.tmp 6ca24dc0cde4be96c24a3a5018568bf0N.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\hwrusash.dat.tmp 6ca24dc0cde4be96c24a3a5018568bf0N.exe File created C:\Program Files\Common Files\System\Ole DB\it-IT\oledb32r.dll.mui.tmp 6ca24dc0cde4be96c24a3a5018568bf0N.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\flower_precomp_matte.wmv.tmp 6ca24dc0cde4be96c24a3a5018568bf0N.exe File created C:\Program Files\7-Zip\Lang\fr.txt.tmp 6ca24dc0cde4be96c24a3a5018568bf0N.exe File created C:\Program Files\Common Files\Microsoft Shared\Stationery\Hand Prints.htm.tmp 6ca24dc0cde4be96c24a3a5018568bf0N.exe File created C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS20\MSTTSLoc.dll.tmp 6ca24dc0cde4be96c24a3a5018568bf0N.exe File created C:\Program Files\Common Files\System\msadc\de-DE\msaddsr.dll.mui.tmp 6ca24dc0cde4be96c24a3a5018568bf0N.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\NavigationRight_SelectionSubpicture.png.tmp 6ca24dc0cde4be96c24a3a5018568bf0N.exe File created C:\Program Files\7-Zip\Lang\th.txt.tmp 6ca24dc0cde4be96c24a3a5018568bf0N.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\osknumpad.xml.tmp 6ca24dc0cde4be96c24a3a5018568bf0N.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\InkObj.dll.tmp 6ca24dc0cde4be96c24a3a5018568bf0N.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\bandwidth.png.tmp 6ca24dc0cde4be96c24a3a5018568bf0N.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\OldAge\decorative_rule.png.tmp 6ca24dc0cde4be96c24a3a5018568bf0N.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Push\pushplaysubpicture.png.tmp 6ca24dc0cde4be96c24a3a5018568bf0N.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\shadowonlyframe_selectionsubpicture.png.tmp 6ca24dc0cde4be96c24a3a5018568bf0N.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Stacking\NavigationRight_ButtonGraphic.png.tmp 6ca24dc0cde4be96c24a3a5018568bf0N.exe File created C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS20\MSTTSCommon.dll.tmp 6ca24dc0cde4be96c24a3a5018568bf0N.exe File created C:\Program Files\Common Files\System\Ole DB\es-ES\oledb32r.dll.mui.tmp 6ca24dc0cde4be96c24a3a5018568bf0N.exe File created C:\Program Files\DVD Maker\es-ES\OmdProject.dll.mui.tmp 6ca24dc0cde4be96c24a3a5018568bf0N.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Full\NavigationUp_SelectionSubpicture.png.tmp 6ca24dc0cde4be96c24a3a5018568bf0N.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\ipsfra.xml.tmp 6ca24dc0cde4be96c24a3a5018568bf0N.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\reflect.png.tmp 6ca24dc0cde4be96c24a3a5018568bf0N.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\en-US\split.avi.tmp 6ca24dc0cde4be96c24a3a5018568bf0N.exe File created C:\Program Files\Google\Chrome\Application\106.0.5249.119\VisualElements\SmallLogoCanary.png.tmp 6ca24dc0cde4be96c24a3a5018568bf0N.exe File created C:\Program Files\Common Files\System\Ole DB\en-US\oledb32r.dll.mui.tmp 6ca24dc0cde4be96c24a3a5018568bf0N.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\bear_formatted_rgb6.wmv.tmp 6ca24dc0cde4be96c24a3a5018568bf0N.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\flower_trans_MATTE_PAL.wmv.tmp 6ca24dc0cde4be96c24a3a5018568bf0N.exe File created C:\Program Files\Common Files\System\msadc\fr-FR\msdaremr.dll.mui.tmp 6ca24dc0cde4be96c24a3a5018568bf0N.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\OldAge\NavigationRight_ButtonGraphic.png.tmp 6ca24dc0cde4be96c24a3a5018568bf0N.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\TitleButtonSubpicture.png.tmp 6ca24dc0cde4be96c24a3a5018568bf0N.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\SpecialNavigationLeft_SelectionSubpicture.png.tmp 6ca24dc0cde4be96c24a3a5018568bf0N.exe File created C:\Program Files\Common Files\Microsoft Shared\Stationery\Cave_Drawings.gif.tmp 6ca24dc0cde4be96c24a3a5018568bf0N.exe File created C:\Program Files\Common Files\Microsoft Shared\Stationery\grid_(cm).wmf.tmp 6ca24dc0cde4be96c24a3a5018568bf0N.exe File created C:\Program Files\Common Files\System\ado\adovbs.inc.tmp 6ca24dc0cde4be96c24a3a5018568bf0N.exe File created C:\Program Files\Common Files\System\msadc\en-US\msdaprsr.dll.mui.tmp 6ca24dc0cde4be96c24a3a5018568bf0N.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\en-US\IPSEventLogMsg.dll.mui.tmp 6ca24dc0cde4be96c24a3a5018568bf0N.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\hwrusalm.dat.tmp 6ca24dc0cde4be96c24a3a5018568bf0N.exe File created C:\Program Files\Common Files\Microsoft Shared\Stationery\Roses.jpg.tmp 6ca24dc0cde4be96c24a3a5018568bf0N.exe File created C:\Program Files\Common Files\Microsoft Shared\Stationery\Music.emf.tmp 6ca24dc0cde4be96c24a3a5018568bf0N.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\button-highlight.png.tmp 6ca24dc0cde4be96c24a3a5018568bf0N.exe File created C:\Program Files\7-Zip\Lang\ky.txt.tmp 6ca24dc0cde4be96c24a3a5018568bf0N.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-join.avi.tmp 6ca24dc0cde4be96c24a3a5018568bf0N.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\zh-TW\tipresx.dll.mui.tmp 6ca24dc0cde4be96c24a3a5018568bf0N.exe File created C:\Program Files\Common Files\Microsoft Shared\Stationery\Genko_2.emf.tmp 6ca24dc0cde4be96c24a3a5018568bf0N.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\TabIpsps.dll.tmp 6ca24dc0cde4be96c24a3a5018568bf0N.exe File created C:\Program Files\Common Files\System\es-ES\wab32res.dll.mui.tmp 6ca24dc0cde4be96c24a3a5018568bf0N.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_image-frame-backglow.png.tmp 6ca24dc0cde4be96c24a3a5018568bf0N.exe File created C:\Program Files\7-Zip\7z.dll.tmp 6ca24dc0cde4be96c24a3a5018568bf0N.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\16_9-frame-image-mask.png.tmp 6ca24dc0cde4be96c24a3a5018568bf0N.exe File created C:\Program Files\DVD Maker\Shared\DissolveAnother.png.tmp 6ca24dc0cde4be96c24a3a5018568bf0N.exe File created C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\am.pak.tmp 6ca24dc0cde4be96c24a3a5018568bf0N.exe File created C:\Program Files\7-Zip\Lang\lij.txt.tmp 6ca24dc0cde4be96c24a3a5018568bf0N.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\ja-JP\ShapeCollector.exe.mui.tmp 6ca24dc0cde4be96c24a3a5018568bf0N.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\mshwgst.dll.tmp 6ca24dc0cde4be96c24a3a5018568bf0N.exe File created C:\Program Files\DVD Maker\fr-FR\DVDMaker.exe.mui.tmp 6ca24dc0cde4be96c24a3a5018568bf0N.exe File created C:\Program Files\Common Files\Microsoft Shared\Stationery\Month_Calendar.emf.tmp 6ca24dc0cde4be96c24a3a5018568bf0N.exe File created C:\Program Files\Common Files\System\ado\msado25.tlb.tmp 6ca24dc0cde4be96c24a3a5018568bf0N.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\1047x576black.png.tmp 6ca24dc0cde4be96c24a3a5018568bf0N.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
60KB
MD5b08d10ed13b6704ed0e9d3ccca61850c
SHA18ac79db581a0a509d6745ebb69019a4191970f63
SHA256b99c568c463d0c79e383624f293dee9832d9138b7df9509ad3d7c78072ab12ce
SHA512e65818e550f94147db10eb656fc9e30f082d0feee78ca581838383e06cd75cc9338d18a3e87be576c351cb1b2da0ebb6910a818ab3b064d62e03c8913be60821
-
Filesize
69KB
MD5488e2fba1be34312f0594606d0bc4a66
SHA1a73d929e894516686adab472b7e4850cedd56c6d
SHA256ac5280d13932d34c83136cdd2838475838f7383d537d9234b8d05033f6854248
SHA512f843710d45cc1b2d1c0f824fbd0f2f8b0165a92c4ee449ebc2b2b9bfe38cff83feb74240744c9a4d59ad248e4894db252c1cb7482098165c10938e70a6c4e220