Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
645cd161d581e5exeexeexeex.exe
-
Size
179KB
-
Sample
230708-y4gs8ahh66
-
MD5
645cd161d581e5eb5536075b715dc323
-
SHA1
75f7878c4ecf22c81f55d239113a3c45518c919a
-
SHA256
7fff78bb9df78c68bdc95ba65dc5ac5227ee7962df375309cf34379177c976d8
-
SHA512
161cd0ee9a08468812bfc5159a2f44b7411f4f712dce3ea4b1138b6325524a99ce1a4d613f8e2cce1e7d77b00f3279781712ee637dc0506c4c4df45506d4dfb2
-
SSDEEP
3072:4BSF3kHSHUN4yTGnBDhOj3AyxGAlLGGwmyK0z2FWqnSGhloPv2:8SF3kHScNTeBDh43AQQJmyKHWDSl
Static task
static1
Behavioral task
behavioral1
Sample
645cd161d581e5exeexeexeex.exe
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
645cd161d581e5exeexeexeex.exe
Resource
win10v2004-20230703-en
Malware Config
Extracted
C:\Users\Admin\Pictures\README.hta
Extracted
C:\Users\Admin\Pictures\README.hta
Targets
-
-
Target
645cd161d581e5exeexeexeex.exe
-
Size
179KB
-
MD5
645cd161d581e5eb5536075b715dc323
-
SHA1
75f7878c4ecf22c81f55d239113a3c45518c919a
-
SHA256
7fff78bb9df78c68bdc95ba65dc5ac5227ee7962df375309cf34379177c976d8
-
SHA512
161cd0ee9a08468812bfc5159a2f44b7411f4f712dce3ea4b1138b6325524a99ce1a4d613f8e2cce1e7d77b00f3279781712ee637dc0506c4c4df45506d4dfb2
-
SSDEEP
3072:4BSF3kHSHUN4yTGnBDhOj3AyxGAlLGGwmyK0z2FWqnSGhloPv2:8SF3kHScNTeBDh43AQQJmyKHWDSl
Score10/10-
Contacts a large (1024) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Contacts a large (1033) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Modifies extensions of user files
Ransomware generally changes the extension on encrypted files.
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Sets desktop wallpaper using registry
-