Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

7

9eaa7ec1f2...AS.exe

windows7-x64

9

9eaa7ec1f2...AS.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9eaa7ec1f2de7e8a7a4b4fdad3e554e0_NEAS

  • Size

    108KB

  • Sample

    240507-qlsh1ahc9z

  • MD5

    9eaa7ec1f2de7e8a7a4b4fdad3e554e0

  • SHA1

    19066c92c15ecfe381fe0e880bf18cf3f16e575f

  • SHA256

    d75e24082ee551b534516da62560c59a71c3a0053394fdd510414e687b89525d

  • SHA512

    fd30d79ae0cb477f832b07cbd0b819a09c947905f6e7dc6404bb06c35d10b43b876134fdcf27c8e36403dae91a8b2ff0fe1b4e29251134ad4ceab20dc41a20b5

  • SSDEEP

    1536:Isz1++PJHJXFAIuZAIuekc9zBfA1OjBWgOI3uicwa+shcBEN2iqxtdSCow8hfOC:hfAIuZAIuYSMjoqtMHfhfh

Score
9/10
ransomwareupx

Malware Config

Targets

    • Target

      9eaa7ec1f2de7e8a7a4b4fdad3e554e0_NEAS

    • Size

      108KB

    • MD5

      9eaa7ec1f2de7e8a7a4b4fdad3e554e0

    • SHA1

      19066c92c15ecfe381fe0e880bf18cf3f16e575f

    • SHA256

      d75e24082ee551b534516da62560c59a71c3a0053394fdd510414e687b89525d

    • SHA512

      fd30d79ae0cb477f832b07cbd0b819a09c947905f6e7dc6404bb06c35d10b43b876134fdcf27c8e36403dae91a8b2ff0fe1b4e29251134ad4ceab20dc41a20b5

    • SSDEEP

      1536:Isz1++PJHJXFAIuZAIuekc9zBfA1OjBWgOI3uicwa+shcBEN2iqxtdSCow8hfOC:hfAIuZAIuYSMjoqtMHfhfh

    Score
    9/10
    ransomwareupx

    • Renames multiple (3440) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks