Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

3

5fb9c61110...e0.exe

windows7-x64

9

5fb9c61110...e0.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5fb9c6111070da5e44babc9249785ec6903700fc33d02303475af3a9217326e0

  • Size

    178KB

  • Sample

    240515-2mgcxafg3z

  • MD5

    20f95d790629e7aad21758d12d83d956

  • SHA1

    e7645597a5f56e7604bb7cfa59eccbc9b7679cc0

  • SHA256

    5fb9c6111070da5e44babc9249785ec6903700fc33d02303475af3a9217326e0

  • SHA512

    fe090daec60f5c48759c7664d9bdbf03030d493630f3224c5a9410a9a684b6ea6dc1828bbbda49600db8c608afb8675b0d5c164491aae304bfed04f1d24f0bfa

  • SSDEEP

    3072:6rWpcOPxPke+e3fFpsJOfFpsJbgEvrWpcOPxPke+e3fFpsJOfFpsJbgE5:tFPxPke+eISFPxPke+eI5

Score
9/10
ransomware

Malware Config

Targets

    • Target

      5fb9c6111070da5e44babc9249785ec6903700fc33d02303475af3a9217326e0

    • Size

      178KB

    • MD5

      20f95d790629e7aad21758d12d83d956

    • SHA1

      e7645597a5f56e7604bb7cfa59eccbc9b7679cc0

    • SHA256

      5fb9c6111070da5e44babc9249785ec6903700fc33d02303475af3a9217326e0

    • SHA512

      fe090daec60f5c48759c7664d9bdbf03030d493630f3224c5a9410a9a684b6ea6dc1828bbbda49600db8c608afb8675b0d5c164491aae304bfed04f1d24f0bfa

    • SSDEEP

      3072:6rWpcOPxPke+e3fFpsJOfFpsJbgEvrWpcOPxPke+e3fFpsJOfFpsJbgE5:tFPxPke+eISFPxPke+eI5

    Score
    9/10
    ransomware

    • Renames multiple (574) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks