Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

8e4f94f879...46.exe

windows7-x64

9

8e4f94f879...46.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8e4f94f87946f63851273d193f52cf887689ea49d9300e0f76567204bfd81146

  • Size

    121KB

  • Sample

    240505-b88feaea86

  • MD5

    08526595716d52bf9f6ef50fca514fa1

  • SHA1

    1cc99a9a07d1e785d08bfb81d84e1ae7827063ba

  • SHA256

    8e4f94f87946f63851273d193f52cf887689ea49d9300e0f76567204bfd81146

  • SHA512

    208889936298d0cb5bfa94f3f27dea0e1b1f0644c90b3d625cff6ecf73a75163acd019443705db731054c6726ab02297cdebfe599e47145812689e74a165d332

  • SSDEEP

    1536:67Zf/FAlsM1++PJHJXFAIuZAIuekc9zBfA1OjBWgOI3uicwa+shcBEN2iqxtdSCp:+nymCAIuZAIuYSMjoqtMHfhfI

Score
10/10
ransomwareupx

Malware Config

Targets

    • Target

      8e4f94f87946f63851273d193f52cf887689ea49d9300e0f76567204bfd81146

    • Size

      121KB

    • MD5

      08526595716d52bf9f6ef50fca514fa1

    • SHA1

      1cc99a9a07d1e785d08bfb81d84e1ae7827063ba

    • SHA256

      8e4f94f87946f63851273d193f52cf887689ea49d9300e0f76567204bfd81146

    • SHA512

      208889936298d0cb5bfa94f3f27dea0e1b1f0644c90b3d625cff6ecf73a75163acd019443705db731054c6726ab02297cdebfe599e47145812689e74a165d332

    • SSDEEP

      1536:67Zf/FAlsM1++PJHJXFAIuZAIuekc9zBfA1OjBWgOI3uicwa+shcBEN2iqxtdSCp:+nymCAIuZAIuYSMjoqtMHfhfI

    Score
    9/10
    ransomwareupx

    • Renames multiple (3432) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX dump on OEP (original entry point)

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks