Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

2024-01-11...ia.exe

windows7-x64

10

2024-01-11...ia.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-01-11_cccc79bc1c613415bc69ba3f44ff14bf_mafia

  • Size

    319KB

  • Sample

    240112-gtrr1aabbq

  • MD5

    cccc79bc1c613415bc69ba3f44ff14bf

  • SHA1

    5083372da65f2815e552f5d5126560cd1d7f81fc

  • SHA256

    f2157f37097464747d2ad1eb6bced742668aa9dc4f5d333fdc1a1e0def445816

  • SHA512

    ef55e155d98b99d6f9e81d40f21a79b4fcb22eb407b69feb9fa016e86c3dd0e63b134ae9575344918bf1c13d45cfdfb659f525b9f5f8b3f9be1f199fdbb33e84

  • SSDEEP

    3072:kkLFqoITs8+GgzXKhp6vFcBNTjbL617AL6MfUL1OeV7LGyH0Bme3BdcpFbMT9O:kkLFAYz7z6hp2W1L61ALCOk7LhdeROuO

Score
10/10
gandcrabbackdoorransomware

Malware Config

Targets

    • Target

      2024-01-11_cccc79bc1c613415bc69ba3f44ff14bf_mafia

    • Size

      319KB

    • MD5

      cccc79bc1c613415bc69ba3f44ff14bf

    • SHA1

      5083372da65f2815e552f5d5126560cd1d7f81fc

    • SHA256

      f2157f37097464747d2ad1eb6bced742668aa9dc4f5d333fdc1a1e0def445816

    • SHA512

      ef55e155d98b99d6f9e81d40f21a79b4fcb22eb407b69feb9fa016e86c3dd0e63b134ae9575344918bf1c13d45cfdfb659f525b9f5f8b3f9be1f199fdbb33e84

    • SSDEEP

      3072:kkLFqoITs8+GgzXKhp6vFcBNTjbL617AL6MfUL1OeV7LGyH0Bme3BdcpFbMT9O:kkLFAYz7z6hp2W1L61ALCOk7LhdeROuO

    Score
    10/10
    gandcrabbackdoorransomware

    • GandCrab payload

    • Gandcrab

      Gandcrab is a Trojan horse that encrypts files on a computer.

      ransomwarebackdoorgandcrab

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks