Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

c73ce65d0a...b0.exe

windows7-x64

9

c73ce65d0a...b0.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c73ce65d0a593550e9f82d00641591aa66fe65f024622657c06977e8bfbbeeb0

  • Size

    317KB

  • Sample

    240512-dxfx5ahc35

  • MD5

    4958bf6db06aea0994de53249ab413d3

  • SHA1

    3382d54f277b7513ae48cc4476ae84108adde42b

  • SHA256

    c73ce65d0a593550e9f82d00641591aa66fe65f024622657c06977e8bfbbeeb0

  • SHA512

    f3639ce485d9b91ac39f936acd069ebefc1dd153b798c3caaed1f866491bdc05e047b7e842c78df3f0236449edc865354a9d80e0caa901c7d33ad7b20601ed51

  • SSDEEP

    6144:KQSo1EZGtKgZGtK/CAIuZAIuOQSo1EZGtKgZGtK/CAIuZAIuk:KQtyZGtKgZGtK/CAIuZAIuOQtyZGtKgF

Score
10/10
ransomwareupx

Malware Config

Targets

    • Target

      c73ce65d0a593550e9f82d00641591aa66fe65f024622657c06977e8bfbbeeb0

    • Size

      317KB

    • MD5

      4958bf6db06aea0994de53249ab413d3

    • SHA1

      3382d54f277b7513ae48cc4476ae84108adde42b

    • SHA256

      c73ce65d0a593550e9f82d00641591aa66fe65f024622657c06977e8bfbbeeb0

    • SHA512

      f3639ce485d9b91ac39f936acd069ebefc1dd153b798c3caaed1f866491bdc05e047b7e842c78df3f0236449edc865354a9d80e0caa901c7d33ad7b20601ed51

    • SSDEEP

      6144:KQSo1EZGtKgZGtK/CAIuZAIuOQSo1EZGtKgZGtK/CAIuZAIuk:KQtyZGtKgZGtK/CAIuZAIuOQtyZGtKgF

    Score
    9/10
    ransomwareupx

    • Renames multiple (3467) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks