Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

419739868b...1e.exe

windows7-x64

9

419739868b...1e.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    419739868bbf8b4c3314497daeb0c9ba8167c06497f2181fbed16c76e0b5011e

  • Size

    125KB

  • Sample

    240511-ztfzlsbg63

  • MD5

    24a63745bca866462922fcca0d52c194

  • SHA1

    8a00d3582eaa040396082c4a2bf8b9aefeed73cf

  • SHA256

    419739868bbf8b4c3314497daeb0c9ba8167c06497f2181fbed16c76e0b5011e

  • SHA512

    a5b463d17edc7b73dc42fe3cb973fbe8b05c2d455756e0be8b830d656103d8892c1ee0f5dbf79aa3091ad78be133159cd695df0b74732dc03e8059adad8791b2

  • SSDEEP

    1536:67Zf/FAlsM1++PJHJXFAIuZAIuekc9zBfA1OjBWgOI3uicwa+shcBEN2iqxtdSC0:+nymCAIuZAIuYSMjoqtMHfhfJ

Score
10/10
ransomwareupx

Malware Config

Targets

    • Target

      419739868bbf8b4c3314497daeb0c9ba8167c06497f2181fbed16c76e0b5011e

    • Size

      125KB

    • MD5

      24a63745bca866462922fcca0d52c194

    • SHA1

      8a00d3582eaa040396082c4a2bf8b9aefeed73cf

    • SHA256

      419739868bbf8b4c3314497daeb0c9ba8167c06497f2181fbed16c76e0b5011e

    • SHA512

      a5b463d17edc7b73dc42fe3cb973fbe8b05c2d455756e0be8b830d656103d8892c1ee0f5dbf79aa3091ad78be133159cd695df0b74732dc03e8059adad8791b2

    • SSDEEP

      1536:67Zf/FAlsM1++PJHJXFAIuZAIuekc9zBfA1OjBWgOI3uicwa+shcBEN2iqxtdSC0:+nymCAIuZAIuYSMjoqtMHfhfJ

    Score
    9/10
    ransomwareupx

    • Renames multiple (3254) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX dump on OEP (original entry point)

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks