Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
10Static
static
10Jules (2).zip
windows7-x64
1Jules (2).zip
windows10-2004-x64
1Jules/Mona...ng.css
windows7-x64
3Jules/Mona...ng.css
windows10-2004-x64
7Jules/Mona...et.css
windows7-x64
3Jules/Mona...et.css
windows10-2004-x64
7Jules/Mona...on.css
windows7-x64
3Jules/Mona...on.css
windows10-2004-x64
7Jules/Mona...et.css
windows7-x64
3Jules/Mona...et.css
windows10-2004-x64
7Jules/Mona...ks.css
windows7-x64
3Jules/Mona...ks.css
windows10-2004-x64
7Jules/Mona...er.css
windows7-x64
3Jules/Mona...er.css
windows10-2004-x64
7Jules/Mona...ts.css
windows7-x64
3Jules/Mona...ts.css
windows10-2004-x64
7Jules/Mona...et.css
windows7-x64
3Jules/Mona...et.css
windows10-2004-x64
7Jules/Mona...ld.css
windows7-x64
3Jules/Mona...ld.css
windows10-2004-x64
7Jules/Mona...on.css
windows7-x64
3Jules/Mona...on.css
windows10-2004-x64
7Jules/Mona...st.css
windows7-x64
3Jules/Mona...st.css
windows10-2004-x64
7Jules/Mona...et.css
windows7-x64
3Jules/Mona...et.css
windows10-2004-x64
7Jules/Mona...i.d.ts
windows7-x64
1Jules/Mona...i.d.ts
windows10-2004-x64
6Jules/Mona...lp.css
windows7-x64
3Jules/Mona...lp.css
windows10-2004-x64
7Jules/Mona...rd.css
windows7-x64
3Jules/Mona...rd.css
windows10-2004-x64
7Analysis
-
max time kernel
88s -
max time network
17s -
platform
windows7_x64 -
resource
win7-20240729-en -
resource tags
arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system -
submitted
11/09/2024, 18:22
Behavioral task
behavioral1
Sample
Jules (2).zip
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Jules (2).zip
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
Jules/Monaco/package/esm/vs/editor/contrib/folding/folding.css
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
Jules/Monaco/package/esm/vs/editor/contrib/folding/folding.css
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
Jules/Monaco/package/esm/vs/editor/contrib/gotoError/media/gotoErrorWidget.css
Resource
win7-20240729-en
Behavioral task
behavioral6
Sample
Jules/Monaco/package/esm/vs/editor/contrib/gotoError/media/gotoErrorWidget.css
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
Jules/Monaco/package/esm/vs/editor/contrib/gotoSymbol/link/goToDefinitionAtPosition.css
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
Jules/Monaco/package/esm/vs/editor/contrib/gotoSymbol/link/goToDefinitionAtPosition.css
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
Jules/Monaco/package/esm/vs/editor/contrib/gotoSymbol/peek/referencesWidget.css
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
Jules/Monaco/package/esm/vs/editor/contrib/gotoSymbol/peek/referencesWidget.css
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
Jules/Monaco/package/esm/vs/editor/contrib/links/links.css
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
Jules/Monaco/package/esm/vs/editor/contrib/links/links.css
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
Jules/Monaco/package/esm/vs/editor/contrib/message/messageController.css
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
Jules/Monaco/package/esm/vs/editor/contrib/message/messageController.css
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
Jules/Monaco/package/esm/vs/editor/contrib/parameterHints/parameterHints.css
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
Jules/Monaco/package/esm/vs/editor/contrib/parameterHints/parameterHints.css
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
Jules/Monaco/package/esm/vs/editor/contrib/peekView/media/peekViewWidget.css
Resource
win7-20240903-en
Behavioral task
behavioral18
Sample
Jules/Monaco/package/esm/vs/editor/contrib/peekView/media/peekViewWidget.css
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
Jules/Monaco/package/esm/vs/editor/contrib/rename/renameInputField.css
Resource
win7-20240708-en
Behavioral task
behavioral20
Sample
Jules/Monaco/package/esm/vs/editor/contrib/rename/renameInputField.css
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
Jules/Monaco/package/esm/vs/editor/contrib/snippet/snippetSession.css
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
Jules/Monaco/package/esm/vs/editor/contrib/snippet/snippetSession.css
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
Jules/Monaco/package/esm/vs/editor/contrib/suggest/media/suggest.css
Resource
win7-20240903-en
Behavioral task
behavioral24
Sample
Jules/Monaco/package/esm/vs/editor/contrib/suggest/media/suggest.css
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
Jules/Monaco/package/esm/vs/editor/contrib/zoneWidget/zoneWidget.css
Resource
win7-20240903-en
Behavioral task
behavioral26
Sample
Jules/Monaco/package/esm/vs/editor/contrib/zoneWidget/zoneWidget.css
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
Jules/Monaco/package/esm/vs/editor/editor.api.d.ts
Resource
win7-20240704-en
Behavioral task
behavioral28
Sample
Jules/Monaco/package/esm/vs/editor/editor.api.d.ts
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
Jules/Monaco/package/esm/vs/editor/standalone/browser/accessibilityHelp/accessibilityHelp.css
Resource
win7-20240708-en
Behavioral task
behavioral30
Sample
Jules/Monaco/package/esm/vs/editor/standalone/browser/accessibilityHelp/accessibilityHelp.css
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
Jules/Monaco/package/esm/vs/editor/standalone/browser/iPadShowKeyboard/iPadShowKeyboard.css
Resource
win7-20240903-en
Behavioral task
behavioral32
Sample
Jules/Monaco/package/esm/vs/editor/standalone/browser/iPadShowKeyboard/iPadShowKeyboard.css
Resource
win10v2004-20240802-en
General
-
Target
Jules/Monaco/package/esm/vs/editor/contrib/gotoError/media/gotoErrorWidget.css
-
Size
1KB
-
MD5
9b3b47bf70887b123c612bb659c15cc5
-
SHA1
b1b0f0b74fd0e29a6175f7bc9767f751f7847e67
-
SHA256
af627c208f66e7a03060f6af7d68e124f3fc31d69a16416a4d26d893a68a1682
-
SHA512
b38dfeb2850656ae2f53dfbcf8240d7c9fae880f724c53bc6ff1fe61df3b654ad73f5118c1d2eedd05c7ce19909b334210fe3fa5dcad94667c08928dad83f08f
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Opens file in notepad (likely ransom note) 1 IoCs
pid Process 2176 NOTEPAD.EXE -
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 1900 wrote to memory of 2176 1900 cmd.exe 31 PID 1900 wrote to memory of 2176 1900 cmd.exe 31 PID 1900 wrote to memory of 2176 1900 cmd.exe 31
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\Jules\Monaco\package\esm\vs\editor\contrib\gotoError\media\gotoErrorWidget.css1⤵
- Suspicious use of WriteProcessMemory
PID:1900 -
C:\Windows\system32\NOTEPAD.EXE"C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\AppData\Local\Temp\Jules\Monaco\package\esm\vs\editor\contrib\gotoError\media\gotoErrorWidget.css2⤵
- Opens file in notepad (likely ransom note)
PID:2176
-