Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
RootFinder_Ransomware.bin.exe
-
Size
100KB
-
Sample
230301-fkn43sef64
-
MD5
a4af347d20fd13f9d07e53ccd7aa5d14
-
SHA1
4d699af90fe02fd16b08316367493ac614e75c91
-
SHA256
0a4d4889a853bc29486d58d8b1010a0b64fd6b6835e28bfda7019b7f1f46e64a
-
SHA512
957a505e1928b8cbd5e1621701bdd08874bb6cc4a0ad42c0e3735dd3b418d39fcf40b0bbd59e3197d77fa457becee81be7d55328019b858fec2dfd3386a42777
-
SSDEEP
3072:YtS8Pqxc/WOcLeaUUEnQKfh9NVgnf0N3XqY:YtS8yG+OcLtUUE1yiHq
Static task
static1
Behavioral task
behavioral1
Sample
RootFinder_Ransomware.bin.exe
Resource
win7-20230220-en
Malware Config
Targets
-
-
Target
RootFinder_Ransomware.bin.exe
-
Size
100KB
-
MD5
a4af347d20fd13f9d07e53ccd7aa5d14
-
SHA1
4d699af90fe02fd16b08316367493ac614e75c91
-
SHA256
0a4d4889a853bc29486d58d8b1010a0b64fd6b6835e28bfda7019b7f1f46e64a
-
SHA512
957a505e1928b8cbd5e1621701bdd08874bb6cc4a0ad42c0e3735dd3b418d39fcf40b0bbd59e3197d77fa457becee81be7d55328019b858fec2dfd3386a42777
-
SSDEEP
3072:YtS8Pqxc/WOcLeaUUEnQKfh9NVgnf0N3XqY:YtS8yG+OcLtUUE1yiHq
-
Disables RegEdit via registry modification
-
Disables Task Manager via registry modification
-
Drops desktop.ini file(s)
-