Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
122s -
max time network
137s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
11/09/2024, 18:22
General
-
Target
Jules/Monaco/package/esm/vs/editor/contrib/zoneWidget/zoneWidget.css
-
Size
616B
-
MD5
efb5a7a704db1f73259e42eea9aed38c
-
SHA1
cca017045052d7055d03e080731b1b227410e94a
-
SHA256
bf5be72d0135b320c34bb2d4ddec197671c7974c8ab93140eee88bca93035c1f
-
SHA512
8a7e7e9ce0d76a2f60238142c9d2010d63e89446d698fb0afefde0eb53886a871817c18bd4a038f48dfb039ab43aad3e726be03a5472df61b4057e93356a985a
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Opens file in notepad (likely ransom note) 1 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\Jules\Monaco\package\esm\vs\editor\contrib\zoneWidget\zoneWidget.css1⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\NOTEPAD.EXE"C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\AppData\Local\Temp\Jules\Monaco\package\esm\vs\editor\contrib\zoneWidget\zoneWidget.css2⤵
- Opens file in notepad (likely ransom note)
-