Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

20230429ff...ck.exe

windows7-x64

10

20230429ff...ck.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    20230429ffc9b11fc8dea0432f634a37f4b05e42virlock.bin

  • Size

    2.1MB

  • Sample

    230506-zqf57sff9v

  • MD5

    ffc9b11fc8dea0432f634a37f4b05e42

  • SHA1

    e0fc237a8f07c11cf167082bd1eb3ffe9c4f8bef

  • SHA256

    ec2c57559451ce2035b87787377deff11adf05766a20befa77e1bc652651c624

  • SHA512

    911e18d00b9a9ee80f3630a4050721a549c106af29c54b3174c1d38aa66c7cf7ca0c13a697d92dfb3cf8e8a6b0c0a9422950ed653307e3e38bd5411c6f8e8085

  • SSDEEP

    49152:eWWdEEJt1NkLksmKj8BdfHEJOjrICfbSa8DAn:oJt7

Score
10/10
evasionpersistenceransomwarespywarestealertrojan

Malware Config

Targets

    • Target

      20230429ffc9b11fc8dea0432f634a37f4b05e42virlock.bin

    • Size

      2.1MB

    • MD5

      ffc9b11fc8dea0432f634a37f4b05e42

    • SHA1

      e0fc237a8f07c11cf167082bd1eb3ffe9c4f8bef

    • SHA256

      ec2c57559451ce2035b87787377deff11adf05766a20befa77e1bc652651c624

    • SHA512

      911e18d00b9a9ee80f3630a4050721a549c106af29c54b3174c1d38aa66c7cf7ca0c13a697d92dfb3cf8e8a6b0c0a9422950ed653307e3e38bd5411c6f8e8085

    • SSDEEP

      49152:eWWdEEJt1NkLksmKj8BdfHEJOjrICfbSa8DAn:oJt7

    Score
    10/10
    evasionpersistenceransomwarespywarestealertrojan

    • Modifies WinLogon for persistence

      persistence

    • Modifies visibility of file extensions in Explorer

      evasion

    • UAC bypass

      evasiontrojan

    • Modifies extensions of user files

      Ransomware generally changes the extension on encrypted files.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks