Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
7Static
static
3Unconfirme...36.zip
windows7-x64
1Unconfirme...36.zip
windows10-2004-x64
1bin/Monaco...et.css
windows7-x64
3bin/Monaco...et.css
windows10-2004-x64
7bin/Monaco...ng.css
windows7-x64
3bin/Monaco...ng.css
windows10-2004-x64
7bin/Monaco...et.css
windows7-x64
3bin/Monaco...et.css
windows10-2004-x64
7bin/Monaco...on.css
windows7-x64
3bin/Monaco...on.css
windows10-2004-x64
7bin/Monaco...et.css
windows7-x64
3bin/Monaco...et.css
windows10-2004-x64
7bin/Monaco...ks.css
windows7-x64
3bin/Monaco...ks.css
windows10-2004-x64
7bin/Monaco...er.css
windows7-x64
3bin/Monaco...er.css
windows10-2004-x64
7bin/Monaco...ts.css
windows7-x64
3bin/Monaco...ts.css
windows10-2004-x64
7bin/Monaco...et.css
windows7-x64
3bin/Monaco...et.css
windows10-2004-x64
7bin/Monaco...on.css
windows7-x64
3bin/Monaco...on.css
windows10-2004-x64
7bin/Monaco...st.css
windows7-x64
3bin/Monaco...st.css
windows10-2004-x64
7bin/Monaco...et.css
windows7-x64
3bin/Monaco...et.css
windows10-2004-x64
7bin/Monaco...lp.css
windows7-x64
3bin/Monaco...lp.css
windows10-2004-x64
7bin/Monaco...n.d.ts
windows7-x64
1bin/Monaco...n.d.ts
windows10-2004-x64
6bin/Monaco...e.d.ts
windows7-x64
1bin/Monaco...e.d.ts
windows10-2004-x64
6Analysis
-
max time kernel
143s -
max time network
158s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
27/07/2024, 06:01
Static task
static1
Behavioral task
behavioral1
Sample
Unconfirmed 168736.zip
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
Unconfirmed 168736.zip
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
bin/Monaco/package/esm/vs/editor/contrib/find/findWidget.css
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
bin/Monaco/package/esm/vs/editor/contrib/find/findWidget.css
Resource
win10v2004-20240709-en
Behavioral task
behavioral5
Sample
bin/Monaco/package/esm/vs/editor/contrib/folding/folding.css
Resource
win7-20240704-en
Behavioral task
behavioral6
Sample
bin/Monaco/package/esm/vs/editor/contrib/folding/folding.css
Resource
win10v2004-20240709-en
Behavioral task
behavioral7
Sample
bin/Monaco/package/esm/vs/editor/contrib/gotoError/media/gotoErrorWidget.css
Resource
win7-20240708-en
Behavioral task
behavioral8
Sample
bin/Monaco/package/esm/vs/editor/contrib/gotoError/media/gotoErrorWidget.css
Resource
win10v2004-20240709-en
Behavioral task
behavioral9
Sample
bin/Monaco/package/esm/vs/editor/contrib/gotoSymbol/link/goToDefinitionAtPosition.css
Resource
win7-20240705-en
Behavioral task
behavioral10
Sample
bin/Monaco/package/esm/vs/editor/contrib/gotoSymbol/link/goToDefinitionAtPosition.css
Resource
win10v2004-20240709-en
Behavioral task
behavioral11
Sample
bin/Monaco/package/esm/vs/editor/contrib/gotoSymbol/peek/referencesWidget.css
Resource
win7-20240708-en
Behavioral task
behavioral12
Sample
bin/Monaco/package/esm/vs/editor/contrib/gotoSymbol/peek/referencesWidget.css
Resource
win10v2004-20240709-en
Behavioral task
behavioral13
Sample
bin/Monaco/package/esm/vs/editor/contrib/links/links.css
Resource
win7-20240704-en
Behavioral task
behavioral14
Sample
bin/Monaco/package/esm/vs/editor/contrib/links/links.css
Resource
win10v2004-20240709-en
Behavioral task
behavioral15
Sample
bin/Monaco/package/esm/vs/editor/contrib/message/messageController.css
Resource
win7-20240705-en
Behavioral task
behavioral16
Sample
bin/Monaco/package/esm/vs/editor/contrib/message/messageController.css
Resource
win10v2004-20240709-en
Behavioral task
behavioral17
Sample
bin/Monaco/package/esm/vs/editor/contrib/parameterHints/parameterHints.css
Resource
win7-20240705-en
Behavioral task
behavioral18
Sample
bin/Monaco/package/esm/vs/editor/contrib/parameterHints/parameterHints.css
Resource
win10v2004-20240709-en
Behavioral task
behavioral19
Sample
bin/Monaco/package/esm/vs/editor/contrib/peekView/media/peekViewWidget.css
Resource
win7-20240708-en
Behavioral task
behavioral20
Sample
bin/Monaco/package/esm/vs/editor/contrib/peekView/media/peekViewWidget.css
Resource
win10v2004-20240709-en
Behavioral task
behavioral21
Sample
bin/Monaco/package/esm/vs/editor/contrib/snippet/snippetSession.css
Resource
win7-20240705-en
Behavioral task
behavioral22
Sample
bin/Monaco/package/esm/vs/editor/contrib/snippet/snippetSession.css
Resource
win10v2004-20240709-en
Behavioral task
behavioral23
Sample
bin/Monaco/package/esm/vs/editor/contrib/suggest/media/suggest.css
Resource
win7-20240705-en
Behavioral task
behavioral24
Sample
bin/Monaco/package/esm/vs/editor/contrib/suggest/media/suggest.css
Resource
win10v2004-20240709-en
Behavioral task
behavioral25
Sample
bin/Monaco/package/esm/vs/editor/contrib/zoneWidget/zoneWidget.css
Resource
win7-20240708-en
Behavioral task
behavioral26
Sample
bin/Monaco/package/esm/vs/editor/contrib/zoneWidget/zoneWidget.css
Resource
win10v2004-20240709-en
Behavioral task
behavioral27
Sample
bin/Monaco/package/esm/vs/editor/standalone/browser/accessibilityHelp/accessibilityHelp.css
Resource
win7-20240704-en
Behavioral task
behavioral28
Sample
bin/Monaco/package/esm/vs/editor/standalone/browser/accessibilityHelp/accessibilityHelp.css
Resource
win10v2004-20240709-en
Behavioral task
behavioral29
Sample
bin/Monaco/package/esm/vs/language/css/monaco.contribution.d.ts
Resource
win7-20240704-en
Behavioral task
behavioral30
Sample
bin/Monaco/package/esm/vs/language/css/monaco.contribution.d.ts
Resource
win10v2004-20240709-en
Behavioral task
behavioral31
Sample
bin/Monaco/package/esm/vs/language/json/fillers/monaco-editor-core.d.ts
Resource
win7-20240704-en
Behavioral task
behavioral32
Sample
bin/Monaco/package/esm/vs/language/json/fillers/monaco-editor-core.d.ts
Resource
win10v2004-20240709-en
General
-
Target
bin/Monaco/package/esm/vs/editor/contrib/find/findWidget.css
-
Size
5KB
-
MD5
4c18d8d5cae9cdff85dbf44b6b8a5df0
-
SHA1
245cdd39b46242f75a51f69cd1225c16a9b8f3b5
-
SHA256
70e52975150f4f57ca1d9699bff44efa8ea22bd3942c301a1be8b73c676e7a69
-
SHA512
b3a31e9289753dd1ae0eaaee971c1e26811be4f04da9f77eceb3206abe7801e0b562f3e4f9f1bf790453bbf069694a15a400e78e39950c4c5ba0ad5e84eab50b
-
SSDEEP
96:HDGE+KEK11sBLLRWyQ3+B7PSa2tGqFZCRU:t11sBLtW/++LBl
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 1 IoCs
Looks up country code configured in the registry, likely geofence.
description ioc Process Key value queried \REGISTRY\USER\S-1-5-21-2990742725-2267136959-192470804-1000\Control Panel\International\Geo\Nation cmd.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-2990742725-2267136959-192470804-1000_Classes\Local Settings cmd.exe -
Opens file in notepad (likely ransom note) 1 IoCs
pid Process 3128 NOTEPAD.EXE -
Suspicious use of WriteProcessMemory 2 IoCs
description pid Process procid_target PID 4288 wrote to memory of 3128 4288 cmd.exe 85 PID 4288 wrote to memory of 3128 4288 cmd.exe 85
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\bin\Monaco\package\esm\vs\editor\contrib\find\findWidget.css1⤵
- Checks computer location settings
- Modifies registry class
- Suspicious use of WriteProcessMemory
PID:4288 -
C:\Windows\system32\NOTEPAD.EXE"C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\AppData\Local\Temp\bin\Monaco\package\esm\vs\editor\contrib\find\findWidget.css2⤵
- Opens file in notepad (likely ransom note)
PID:3128
-