Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

192c0ae6bc...c6.exe

windows7-x64

9

192c0ae6bc...c6.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    192c0ae6bce5cc382ed5bf22a92852c3dbb24e9a502c26bbafc9022ff06cb1c6

  • Size

    53KB

  • Sample

    240511-xty43sfg75

  • MD5

    658d3d0691c138533051d139ba21747d

  • SHA1

    6b6bf31f2203ca3723d51f37355da46163ec816c

  • SHA256

    192c0ae6bce5cc382ed5bf22a92852c3dbb24e9a502c26bbafc9022ff06cb1c6

  • SHA512

    b08b22ffbaf8842c6061c2607f6498e3a1a698060dc26b9fe591cb4bf08430fd70bb9abfd9fa03451ec7f0fbecfffdc844b34c5b78fc0071168f8c31e44547e4

  • SSDEEP

    768:67Blpf/FAK65euBT37CPKK0SjHm0CAbLg++PJHJzIWD+dVdCYgck5sIZFZj:67Zf/FAxTWY1++PJHJXA/OsIZL

Score
10/10
ransomwareupx

Malware Config

Targets

    • Target

      192c0ae6bce5cc382ed5bf22a92852c3dbb24e9a502c26bbafc9022ff06cb1c6

    • Size

      53KB

    • MD5

      658d3d0691c138533051d139ba21747d

    • SHA1

      6b6bf31f2203ca3723d51f37355da46163ec816c

    • SHA256

      192c0ae6bce5cc382ed5bf22a92852c3dbb24e9a502c26bbafc9022ff06cb1c6

    • SHA512

      b08b22ffbaf8842c6061c2607f6498e3a1a698060dc26b9fe591cb4bf08430fd70bb9abfd9fa03451ec7f0fbecfffdc844b34c5b78fc0071168f8c31e44547e4

    • SSDEEP

      768:67Blpf/FAK65euBT37CPKK0SjHm0CAbLg++PJHJzIWD+dVdCYgck5sIZFZj:67Zf/FAxTWY1++PJHJXA/OsIZL

    Score
    9/10
    ransomwareupx

    • Renames multiple (775) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX dump on OEP (original entry point)

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks