Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    cc5fd3bd253f1286c971815101cf96153527720fbee0a6209c60695be9366b2a.exe

  • Size

    707KB

  • MD5

    c08ed3f2a66373116775d9d0bdc5f89f

  • SHA1

    f4a6d69dac3b9ad057d58c99aecde9144b06df43

  • SHA256

    cc5fd3bd253f1286c971815101cf96153527720fbee0a6209c60695be9366b2a

  • SHA512

    7c3ddda04cddb04ca5a8547c1e4ef25e3e6849a137b0277521c86f1603bf6ddd1e93a67aa8c5a914b36da35b6f228d3f24267fa377b9b838fb0a8b9fcb7de150

  • SSDEEP

    6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1K8Evnh:6uaTmkZJ+naie5OTamgEoKxLWx6h

Score
10/10

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
  • Detects executables containing commands for clearing Windows Event Logs 1 IoCs
  • Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
  • Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • cc5fd3bd253f1286c971815101cf96153527720fbee0a6209c60695be9366b2a.exe
    .exe windows:5 windows x86 arch:x86

    2f7da257a3159bdb9faeb823ef872a56


    Headers

    Imports

    Sections