Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    bf670698688f30747ea025c7fb2e55e4.exe

  • Size

    70KB

  • Sample

    240517-r23jkscc3z

  • MD5

    bf670698688f30747ea025c7fb2e55e4

  • SHA1

    6ec670aefc1ca2611e3314f5b31dc4d96d88fa70

  • SHA256

    4070c38ccee1f946a8b0a296d848e7762314750da7dd8e2f58fb0fa2a0d05054

  • SHA512

    8d38714f20e4b1990818a27806f8213725bb35db1e98ea3a909f53949e8388c2c3d7a8d6165be198c801b5103799976fbfd60c7538f9d4cb2980544a7ad62c3d

  • SSDEEP

    1536:67Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8asUsry1Sy1t:+nyiQSohsUseVn

Score
9/10

Malware Config

Targets

    • Target

      bf670698688f30747ea025c7fb2e55e4.exe

    • Size

      70KB

    • MD5

      bf670698688f30747ea025c7fb2e55e4

    • SHA1

      6ec670aefc1ca2611e3314f5b31dc4d96d88fa70

    • SHA256

      4070c38ccee1f946a8b0a296d848e7762314750da7dd8e2f58fb0fa2a0d05054

    • SHA512

      8d38714f20e4b1990818a27806f8213725bb35db1e98ea3a909f53949e8388c2c3d7a8d6165be198c801b5103799976fbfd60c7538f9d4cb2980544a7ad62c3d

    • SSDEEP

      1536:67Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8asUsry1Sy1t:+nyiQSohsUseVn

    Score
    9/10
    • Renames multiple (3482) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks