Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
099262b36c3beb9e49eafefdf4eb537969ff759546782e52c9dcddcd7b94ace1
-
Size
45KB
-
Sample
240522-w3jkbaca54
-
MD5
f98a261cfca6f109066daa5626a39a0e
-
SHA1
337a63bd15ecf686a8f20d38ec741c5c12f1def0
-
SHA256
099262b36c3beb9e49eafefdf4eb537969ff759546782e52c9dcddcd7b94ace1
-
SHA512
9fff428a38708224c4e92a8cb9abe21f449353cfabeecf0294dc69d35c75b92dbae9b9bc08c4a7206a1c990e40e2272cb37eeb35eebfd2647b531c5e89235492
-
SSDEEP
768:kBT37CPKKIm0CAbLg++PJHJzIWD+dVdCYgck5sIZFlzc3/Sg2aDM9uA9DM9uAFIO:CTWn1++PJHJXA/OsIZfzc3/Q8PxF
Behavioral task
behavioral1
Sample
099262b36c3beb9e49eafefdf4eb537969ff759546782e52c9dcddcd7b94ace1.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
099262b36c3beb9e49eafefdf4eb537969ff759546782e52c9dcddcd7b94ace1.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
099262b36c3beb9e49eafefdf4eb537969ff759546782e52c9dcddcd7b94ace1
-
Size
45KB
-
MD5
f98a261cfca6f109066daa5626a39a0e
-
SHA1
337a63bd15ecf686a8f20d38ec741c5c12f1def0
-
SHA256
099262b36c3beb9e49eafefdf4eb537969ff759546782e52c9dcddcd7b94ace1
-
SHA512
9fff428a38708224c4e92a8cb9abe21f449353cfabeecf0294dc69d35c75b92dbae9b9bc08c4a7206a1c990e40e2272cb37eeb35eebfd2647b531c5e89235492
-
SSDEEP
768:kBT37CPKKIm0CAbLg++PJHJzIWD+dVdCYgck5sIZFlzc3/Sg2aDM9uA9DM9uAFIO:CTWn1++PJHJXA/OsIZfzc3/Q8PxF
Score9/10-
Renames multiple (3755) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
UPX dump on OEP (original entry point)
-