Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    cc4246805f1dbd68a2dd42dedcceb217dde3fe74509d3bb3ec8cdcbd880b008c.exe

  • Size

    707KB

  • MD5

    b923469fdcdbdb6377fd98422a4dd5a0

  • SHA1

    5fbf0392d5ff94beb2816f818f7f86abe1873d35

  • SHA256

    cc4246805f1dbd68a2dd42dedcceb217dde3fe74509d3bb3ec8cdcbd880b008c

  • SHA512

    875f936b9324933506bc3adf588c093bf15bc914627c6694da4a485b63c733ddb0a4edd19db9ea0c113c0c88c111b183716a33a072422d355ff28478094c6f78

  • SSDEEP

    6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1F8kvnh:6uaTmkZJ+naie5OTamgEoKxLWwah

Score
10/10

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
  • Detects executables containing commands for clearing Windows Event Logs 1 IoCs
  • Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
  • Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • cc4246805f1dbd68a2dd42dedcceb217dde3fe74509d3bb3ec8cdcbd880b008c.exe
    .exe windows:5 windows x86 arch:x86

    2f7da257a3159bdb9faeb823ef872a56


    Headers

    Imports

    Sections

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.