Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-05-16_4e74daa0722a819086e029e68d361cb1_bkransomware_floxif
-
Size
2.0MB
-
Sample
240516-atwydscb85
-
MD5
4e74daa0722a819086e029e68d361cb1
-
SHA1
624bb973ddd415624a21b9e1aa1eff6ae0464761
-
SHA256
c6e0d9f75d538a16d69817076946192199d7f1ffec8e37c57aa93ca5aedf4276
-
SHA512
65521d20c273eecffd8b4419b54c3326d1d26e9ec9db3ec6eb3c8270d4433f1baa794ed9162ceac3469eab5666b1b84f205e08a7825f73a9e7388aec82824288
-
SSDEEP
49152:Dk0eo5nJIioHlq+c6gXR92IISNbecXxHDoXf3M7sSZOZVVNa6Znkv:Dk25nHoHlq+c6y92IBRecXxHUXf3M7ss
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-16_4e74daa0722a819086e029e68d361cb1_bkransomware_floxif.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-05-16_4e74daa0722a819086e029e68d361cb1_bkransomware_floxif.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-05-16_4e74daa0722a819086e029e68d361cb1_bkransomware_floxif
-
Size
2.0MB
-
MD5
4e74daa0722a819086e029e68d361cb1
-
SHA1
624bb973ddd415624a21b9e1aa1eff6ae0464761
-
SHA256
c6e0d9f75d538a16d69817076946192199d7f1ffec8e37c57aa93ca5aedf4276
-
SHA512
65521d20c273eecffd8b4419b54c3326d1d26e9ec9db3ec6eb3c8270d4433f1baa794ed9162ceac3469eab5666b1b84f205e08a7825f73a9e7388aec82824288
-
SSDEEP
49152:Dk0eo5nJIioHlq+c6gXR92IISNbecXxHDoXf3M7sSZOZVVNa6Znkv:Dk25nHoHlq+c6y92IBRecXxHUXf3M7ss
Score9/10-
UPX dump on OEP (original entry point)
-
Modifies AppInit DLL entries
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Loads dropped DLL
-