Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    19s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    22/07/2024, 12:56

General

  • Target

    b3154e8617068646668ddacd786d8360N.exe

  • Size

    66KB

  • MD5

    b3154e8617068646668ddacd786d8360

  • SHA1

    fd583d1445d83dcc8cf7b9150ba0d2d074469dd0

  • SHA256

    3d677c417ff8c15a41f3e0a9d4f407bc5497d452ba8d88ee76f161829fdc119d

  • SHA512

    e456782c39d82ca86aa0e76a3f85a0ade651e3b7c4503f7034294804ae572c0b136978269f1193da97c795455e94716e294daa6a5b661177e554c859be251f8a

  • SSDEEP

    1536:W7ZNLpApCZrt8PWGoPWGANdN+hEwHwDvZvr:6NLWpCZIzjwHwp

Score
9/10

Malware Config

Signatures

  • Renames multiple (310) files with added filename extension

    This suggests ransomware activity of encrypting all the files on the system.

  • Drops file in Program Files directory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\b3154e8617068646668ddacd786d8360N.exe
    "C:\Users\Admin\AppData\Local\Temp\b3154e8617068646668ddacd786d8360N.exe"
    1⤵
    • Drops file in Program Files directory
    PID:2488

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\$Recycle.Bin\S-1-5-21-2212144002-1172735686-1556890956-1000\desktop.ini.tmp

    Filesize

    67KB

    MD5

    d840c6c85dccffd680b2b03a51c84d05

    SHA1

    a51acf59bf1583d955da0b447028b529dfa08a39

    SHA256

    f11cdcc0a435e8ff0ffc4e93ae083a8b5bf2186f924fa6323ec466443d449ce2

    SHA512

    075dbc7658b1a3e49787264aa35562c97ebe3c4377d9a1589e4afb475557853c64f11eb822d12b0d90a0b918e3a8f8a33a73778e1e467ea283c9ca6852dfd9ac

  • C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\Office64WW.xml.tmp

    Filesize

    76KB

    MD5

    a68b603044f7b275d35f7ce9cf211f65

    SHA1

    a17e3cea0b7eb185e8bd41f57153a076026d76a0

    SHA256

    65b762f7f44d730eeb4ae0d2cf2e218cb6cba77d4461139ef90dd37e9d6e8dfc

    SHA512

    c0fd832fe53de90b36418ae8cd62e54915cd21d915b6539fffafd6876a328ea0a314e47829a4d23fbc4a2e2bb21e546cef8d8350c683b3d85e99e4284a6a01f5