Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    16s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    23/07/2024, 06:23

General

  • Target

    78f35d62a1e1e6f0e5c7d07d7bb0a700N.exe

  • Size

    56KB

  • MD5

    78f35d62a1e1e6f0e5c7d07d7bb0a700

  • SHA1

    acbe8bdf11dd86ebcb5877333046de7a0f134d12

  • SHA256

    75bd86d6d1e6d66066c095619ef1c9f7623b4f2b811d386bbfcc172d45e7503b

  • SHA512

    46d245a416436f4bff68ff5cea8ee8cddde4483877a2fe098d73944dfd3d6f44d8faf4580e7822c4b527c533fff2d3a2346fc1d9a6cf8f20beea3f6fe063ea13

  • SSDEEP

    1536:W7ZppApB7tlJ5OvtlJ5OwF7CujdyGdyMMkPMkspqpy:6pWpB7tcttFOui

Score
9/10

Malware Config

Signatures

  • Renames multiple (3054) files with added filename extension

    This suggests ransomware activity of encrypting all the files on the system.

  • Drops file in Program Files directory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\78f35d62a1e1e6f0e5c7d07d7bb0a700N.exe
    "C:\Users\Admin\AppData\Local\Temp\78f35d62a1e1e6f0e5c7d07d7bb0a700N.exe"
    1⤵
    • Drops file in Program Files directory
    PID:2120

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\$Recycle.Bin\S-1-5-21-3450744190-3404161390-554719085-1000\desktop.ini.tmp

    Filesize

    57KB

    MD5

    01783316c0e32a7427d7c8ff2b7a905d

    SHA1

    07db8f012869e490553d00a738f414a18f04b37e

    SHA256

    b6d1164a62f4bd8ff1a4eb6169d5fdcd9c85d79b84ee908f2e1b07eccb316962

    SHA512

    74979421834c9f7908198589e3c706c5c688353f40ca642460e5f084aba09d3a00193634a3c6f2388e67112c9c1cc270759a745ac2c024a3399d2df1a0bf2a33

  • C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\Office64WW.xml.tmp

    Filesize

    65KB

    MD5

    f7bc55d9a785bd38f3c316aefacab0a4

    SHA1

    a406ecf4755566824b84c22b85a68036b3683a45

    SHA256

    5559b83d985b8386576b0e7ef4646f8a3e072aa6c674e45e315b18cc69e48600

    SHA512

    1197b38d19d5859b1d1df590ab4c345332ff763c06f7da0b1f8048d90f4aee038f451ec893428d9047db55021837ba3b010d45e9eda5343ea8693f24a83f825c