Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

a3cf3f2c96...a4.exe

windows7-x64

10

a3cf3f2c96...a4.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a3cf3f2c96208b3fdd58386a08e71ea4

  • Size

    3.0MB

  • Sample

    240225-pw1fxsbf69

  • MD5

    a3cf3f2c96208b3fdd58386a08e71ea4

  • SHA1

    9ab2c4894cd8bec073655181bae5db6ffd28c707

  • SHA256

    30226dff651f19f70cc1e594fc0232ea73059d7fe163d63c27673258d8efad44

  • SHA512

    e298375492acc4962052d97319351f1a60116d9d7e67c3d20d647f77850c6b34a123936a2fc8231016de0b634dd4d7379d74e8a8d99f94d05e8d98b510d8e406

  • SSDEEP

    12288:Cp4pNfz3ymJnJ8QCFkxCaQTOl26ew+VsLkjrVlQB9FbDTF53nlNFRpO50w9XCfyx:8Etl9mRda1Ww3HA

Score
10/10
persistenceransomware

Malware Config

Targets

    • Target

      a3cf3f2c96208b3fdd58386a08e71ea4

    • Size

      3.0MB

    • MD5

      a3cf3f2c96208b3fdd58386a08e71ea4

    • SHA1

      9ab2c4894cd8bec073655181bae5db6ffd28c707

    • SHA256

      30226dff651f19f70cc1e594fc0232ea73059d7fe163d63c27673258d8efad44

    • SHA512

      e298375492acc4962052d97319351f1a60116d9d7e67c3d20d647f77850c6b34a123936a2fc8231016de0b634dd4d7379d74e8a8d99f94d05e8d98b510d8e406

    • SSDEEP

      12288:Cp4pNfz3ymJnJ8QCFkxCaQTOl26ew+VsLkjrVlQB9FbDTF53nlNFRpO50w9XCfyx:8Etl9mRda1Ww3HA

    Score
    10/10
    persistenceransomware

    • Modifies WinLogon for persistence

      persistence

    • Renames multiple (91) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks