Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
48976d7bf38cca4e952507e9ab27e3874ca01092eed53d0fde89c5966e9533bb
-
Size
555KB
-
Sample
221215-tr2weacg67
-
MD5
eff424376edca5680b90ea9fedad163d
-
SHA1
3c13c1e54d2d7991c1c3452ae89888a8e7a47763
-
SHA256
48976d7bf38cca4e952507e9ab27e3874ca01092eed53d0fde89c5966e9533bb
-
SHA512
5acc904da2b8f3371a5696194b4a6fa7c3e735b0bbe74a507efb56782e6fc604f9bd3abf7a3af5f57325c7115de3ac9cd499086430d0d4fbe81b46a57539f068
-
SSDEEP
12288:Y4LNVuczF0QdQsJlehKRwYgJcViFYvgNv+5jGbRFhVoj4d:xvn2sJlBRwYgJcVNE+5jU8j4
Static task
static1
Behavioral task
behavioral1
Sample
48976d7bf38cca4e952507e9ab27e3874ca01092eed53d0fde89c5966e9533bb.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
48976d7bf38cca4e952507e9ab27e3874ca01092eed53d0fde89c5966e9533bb.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
48976d7bf38cca4e952507e9ab27e3874ca01092eed53d0fde89c5966e9533bb
-
Size
555KB
-
MD5
eff424376edca5680b90ea9fedad163d
-
SHA1
3c13c1e54d2d7991c1c3452ae89888a8e7a47763
-
SHA256
48976d7bf38cca4e952507e9ab27e3874ca01092eed53d0fde89c5966e9533bb
-
SHA512
5acc904da2b8f3371a5696194b4a6fa7c3e735b0bbe74a507efb56782e6fc604f9bd3abf7a3af5f57325c7115de3ac9cd499086430d0d4fbe81b46a57539f068
-
SSDEEP
12288:Y4LNVuczF0QdQsJlehKRwYgJcViFYvgNv+5jGbRFhVoj4d:xvn2sJlBRwYgJcVNE+5jU8j4
Score10/10-
Black Basta
A ransomware family targeting Windows and Linux ESXi first seen in February 2022.
-
Modifies boot configuration data using bcdedit
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Sets desktop wallpaper using registry
-