Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

3

676a569953...c1.exe

windows7-x64

9

676a569953...c1.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    676a569953030958354f244e9a6cc2702d9cbad2ab6e390e26320949e68f3ac1

  • Size

    157KB

  • Sample

    240528-15wd4see9t

  • MD5

    251e46ffc463d0aacb9d57ed15d76682

  • SHA1

    c4bdddda33c67b68870f6d3efdb6ebfb55d625ad

  • SHA256

    676a569953030958354f244e9a6cc2702d9cbad2ab6e390e26320949e68f3ac1

  • SHA512

    582c5168a284d525013b5281aed0de8897aefcca307983daa89c4200e4e8e3e12f74f34720c0312e390e7410d31f01db584353cc7239bcfca5321bc9ca2c4958

  • SSDEEP

    3072:69WpQEoTdc6e6kvNDck7Tdc6e6kvNDcksh/Uxh9WpQEoTdc6e6kvNDck7Tdc6e6v:nSTdc6e6kvNDck7Tdc6e6kvNDckyUx29

Score
9/10
ransomware

Malware Config

Targets

    • Target

      676a569953030958354f244e9a6cc2702d9cbad2ab6e390e26320949e68f3ac1

    • Size

      157KB

    • MD5

      251e46ffc463d0aacb9d57ed15d76682

    • SHA1

      c4bdddda33c67b68870f6d3efdb6ebfb55d625ad

    • SHA256

      676a569953030958354f244e9a6cc2702d9cbad2ab6e390e26320949e68f3ac1

    • SHA512

      582c5168a284d525013b5281aed0de8897aefcca307983daa89c4200e4e8e3e12f74f34720c0312e390e7410d31f01db584353cc7239bcfca5321bc9ca2c4958

    • SSDEEP

      3072:69WpQEoTdc6e6kvNDck7Tdc6e6kvNDcksh/Uxh9WpQEoTdc6e6kvNDck7Tdc6e6v:nSTdc6e6kvNDck7Tdc6e6kvNDckyUx29

    Score
    9/10
    ransomware

    • Renames multiple (3730) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks