Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

3

ca1ca4bd00...f8.exe

windows7-x64

9

ca1ca4bd00...f8.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ca1ca4bd00569316346c5e8a563ce06c4710ba25f91d3501cc43ae1be27d7ef8

  • Size

    141KB

  • Sample

    240429-cqdnrafc83

  • MD5

    b50b25a5ec4a93e7f940f325766db898

  • SHA1

    e2c2dde09c5e2445e1526f81217aec1afadb3019

  • SHA256

    ca1ca4bd00569316346c5e8a563ce06c4710ba25f91d3501cc43ae1be27d7ef8

  • SHA512

    07f3b54980008602065ab57ceeb44203c197e7f656d1bf291a74664616ce09914ebf42197ed53225dcaf6b23b635a805de8678325dd3509fc3784157754ce79b

  • SSDEEP

    1536:W7ZhA7pApvOsOKjC0YSilpFpfkJOM2kJOMIsKsc696k7ZhA7pApvOsOKjC0YSilc:6e7WpXYvndke7WpXYvndE

Score
9/10
ransomware

Malware Config

Targets

    • Target

      ca1ca4bd00569316346c5e8a563ce06c4710ba25f91d3501cc43ae1be27d7ef8

    • Size

      141KB

    • MD5

      b50b25a5ec4a93e7f940f325766db898

    • SHA1

      e2c2dde09c5e2445e1526f81217aec1afadb3019

    • SHA256

      ca1ca4bd00569316346c5e8a563ce06c4710ba25f91d3501cc43ae1be27d7ef8

    • SHA512

      07f3b54980008602065ab57ceeb44203c197e7f656d1bf291a74664616ce09914ebf42197ed53225dcaf6b23b635a805de8678325dd3509fc3784157754ce79b

    • SSDEEP

      1536:W7ZhA7pApvOsOKjC0YSilpFpfkJOM2kJOMIsKsc696k7ZhA7pApvOsOKjC0YSilc:6e7WpXYvndke7WpXYvndE

    Score
    9/10
    ransomware

    • Renames multiple (5115) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks