Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

2024-02-01...at.exe

windows7-x64

10

2024-02-01...at.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-02-01_68c04c7a7cdc70b4eebe2dc2dde04c4c_blackcat

  • Size

    14.4MB

  • Sample

    240201-m4kdkadedl

  • MD5

    68c04c7a7cdc70b4eebe2dc2dde04c4c

  • SHA1

    42e6ad4f96b589d79db85e09341b6751f595dcbd

  • SHA256

    c1ff927c596b4f8993bd90c3797b2356a14d29b187e7259f8483af57cfce1087

  • SHA512

    27ac406e8f6e902465dd22c4db5e2c13cc96f5e041f746dde251afc30b3633013a1cb651a8c6eb6dd3b4738c44ab3a30c681c29f748e3dbcfe252911fb52fba8

  • SSDEEP

    196608:czpRr2C41n4lhWj9hAn8Onos9P87SsdE/S7Ym1bjkCGCl2chSh:KRr2JJhEU7SFPm1bACn24S

Score
10/10
blackcatransomware

Malware Config

Targets

    • Target

      2024-02-01_68c04c7a7cdc70b4eebe2dc2dde04c4c_blackcat

    • Size

      14.4MB

    • MD5

      68c04c7a7cdc70b4eebe2dc2dde04c4c

    • SHA1

      42e6ad4f96b589d79db85e09341b6751f595dcbd

    • SHA256

      c1ff927c596b4f8993bd90c3797b2356a14d29b187e7259f8483af57cfce1087

    • SHA512

      27ac406e8f6e902465dd22c4db5e2c13cc96f5e041f746dde251afc30b3633013a1cb651a8c6eb6dd3b4738c44ab3a30c681c29f748e3dbcfe252911fb52fba8

    • SSDEEP

      196608:czpRr2C41n4lhWj9hAn8Onos9P87SsdE/S7Ym1bjkCGCl2chSh:KRr2JJhEU7SFPm1bACn24S

    Score
    10/10
    blackcatransomware

    • BlackCat

      A Rust-based ransomware sold as RaaS first seen in late 2021.

      ransomwareblackcat

    • Detects Windows exceutables bypassing UAC using CMSTP COM interfaces. MITRE (T1218.003)

    • Detects command variations typically used by ransomware

    • Detects executables containing commands for clearing Windows Event Logs

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks