Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time network
142s -
platform
windows10-1703_x64 -
resource
win10-20231220-en -
resource tags
-
submitted
31/12/2023, 22:42
General
-
Target
e563dee44c2d5803f03a22ba355734ca5729e6ea8a1a15ee0d1212280150ada2.exe
-
Size
690KB
-
MD5
36172786193e5f7a14f53d687ff81193
-
SHA1
c000948357737a3efa4d141e4bb7439aed41abb5
-
SHA256
e563dee44c2d5803f03a22ba355734ca5729e6ea8a1a15ee0d1212280150ada2
-
SHA512
e9fc808b1b48aab02aad0574bbb71b8d4815a19a0c03009e9c5e2bcedfc6320ffaa8aa040fc1562aa8be5ac2d19d9a5c44b8344147af0236ad2ce54bc5e2c12e
-
SSDEEP
12288:PQ4Hnb0GvoG5VfM93lbDOKOoRjDgptHZQ8er2wieqcgqAwXEppmubS:o6nIGvoMVwOKjtgpt6BVJAwEpI
Score
10/10
Malware Config
Signatures
-
Djvu Ransomware
Ransomware which is a variant of the STOP family.
-
Downloads MZ/PE file
-
Looks up external IP address via web service 3 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.