Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

54beec0f1e...73.exe

windows7-x64

10

54beec0f1e...73.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    54beec0f1e41b3a17c99eebef9760273

  • Size

    204KB

  • Sample

    231222-c6mxcsagg3

  • MD5

    54beec0f1e41b3a17c99eebef9760273

  • SHA1

    2a7435e6c889d134713148e99b409beb58e034ed

  • SHA256

    b4a906020c2b6f392f9b4d1efe350091a3330d91cee9e6d52858885b4eb30868

  • SHA512

    8df65181934b5d225618ff59c80120d96828158265f077a6e341ecc50bc89b4ab8440fbcdcce23cf0452419511ad4b76967545c6cf6c5502844de00c427647e9

  • SSDEEP

    3072:POaGa4yfWQ/TGvb2biw1ywJPY9BDhAAKAg2OLVFUtzhJ:Wa34YZybc1yeYCAKhUhJ

Score
10/10
gandcrabbackdoorpersistenceransomware

Malware Config

Targets

    • Target

      54beec0f1e41b3a17c99eebef9760273

    • Size

      204KB

    • MD5

      54beec0f1e41b3a17c99eebef9760273

    • SHA1

      2a7435e6c889d134713148e99b409beb58e034ed

    • SHA256

      b4a906020c2b6f392f9b4d1efe350091a3330d91cee9e6d52858885b4eb30868

    • SHA512

      8df65181934b5d225618ff59c80120d96828158265f077a6e341ecc50bc89b4ab8440fbcdcce23cf0452419511ad4b76967545c6cf6c5502844de00c427647e9

    • SSDEEP

      3072:POaGa4yfWQ/TGvb2biw1ywJPY9BDhAAKAg2OLVFUtzhJ:Wa34YZybc1yeYCAKhUhJ

    Score
    10/10
    gandcrabbackdoorpersistenceransomware

    • GandCrab payload

    • Gandcrab

      Gandcrab is a Trojan horse that encrypts files on a computer.

      ransomwarebackdoorgandcrab

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks