Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

30/08/2024, 02:07 UTC

240830-cj8wbasbqc 3

30/08/2024, 02:00 UTC

240830-ce8pra1hrc 1

30/08/2024, 01:56 UTC

240830-ccx58s1grb 8

30/08/2024, 01:52 UTC

240830-cadc2s1fqg 1

30/08/2024, 01:45 UTC

240830-b6ltma1eke 8

30/08/2024, 01:42 UTC

240830-b4pgqs1dla 8

Analysis

  • max time kernel
    119s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    30/08/2024, 02:07 UTC

General

  • Target

    apt/term.log

  • Size

    5KB

  • MD5

    a6e2344188da1895dcf18818f51c7af9

  • SHA1

    dbaf52588ae2752c2c03a225503b1098b91c2c36

  • SHA256

    6dc4090ce095ed4efdcf7e2f492edd3d13e31ff0406bbecaf2823a6989c44c99

  • SHA512

    23be8ea35877c661763634d2a0d3de1964099670c7d334922a3f2bad4906ceb9bc539e06cc4c98ff50667d3157bd6589c9c2b8eeec0a2ae704f11eac383026f4

  • SSDEEP

    96:Qk99upeRYZFII52j88SQAbpis/6SLgwj5TlGMFvrsnAiSL6BE:JwMKrtAY7l4c6ZwjXGMFz0pri

Score
1/10

Malware Config

Signatures

  • Opens file in notepad (likely ransom note) 1 IoCs

Processes

  • C:\Windows\system32\NOTEPAD.EXE
    C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\apt\term.log
    1⤵
    • Opens file in notepad (likely ransom note)
    PID:2636

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.