Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

1

Static

static

1

NSM.ini

windows10-ltsc 2021-x64

1

cAlient32.ini

windows10-ltsc 2021-x64

1

nskbfltr.inf

windows10-ltsc 2021-x64

1

nsm_vpro.ini

windows10-ltsc 2021-x64

1

Resubmissions

04/12/2024, 04:28

241204-e3ta3sxlep 1

04/12/2024, 03:02

241204-djgmhatpdm 1

04/12/2024, 02:46

241204-c9ep6axpg1 10

Analysis

  • max time kernel
    61s
  • max time network
    64s
  • platform
    windows10-ltsc 2021_x64
  • resource
    win10ltsc2021-20241023-en
  • resource tags

    arch:x64arch:x86image:win10ltsc2021-20241023-enlocale:en-usos:windows10-ltsc 2021-x64system
  • submitted
    04/12/2024, 04:28

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    nsm_vpro.ini

  • Size

    46B

  • MD5

    3be27483fdcdbf9ebae93234785235e3

  • SHA1

    360b61fe19cdc1afb2b34d8c25d8b88a4c843a82

  • SHA256

    4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b

  • SHA512

    edbe8cf1cbc5fed80fedf963ade44e08052b19c064e8bca66fa0fe1b332141fbe175b8b727f8f56978d1584baaf27d331947c0b3593aaff5632756199dc470e5

Score
1/10

Malware Config

Signatures

  • Opens file in notepad (likely ransom note) 1 IoCs
    ransomware

Processes

  • C:\Windows\system32\NOTEPAD.EXE
    C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\nsm_vpro.ini
    1⤵
    • Opens file in notepad (likely ransom note)
    PID:2640

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads