Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

cd22ba7b10...51.exe

windows7-x64

9

cd22ba7b10...51.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cd22ba7b10df8e85062a4e8df18d345048e30ba3e9fe8b700fd1ae096a45ab51

  • Size

    50KB

  • Sample

    240529-cxmv1aeh6x

  • MD5

    479dbf6afa8e08f8c1361693c1c7836a

  • SHA1

    c4607cbaffba2aa78c44ceedb1dfbf2618e9fd8a

  • SHA256

    cd22ba7b10df8e85062a4e8df18d345048e30ba3e9fe8b700fd1ae096a45ab51

  • SHA512

    ea9f39494316ff9ee289c0f9e0cc6be9d10354efbb570460ef536e07edf13ba7b862254885955407468973dd76cf574e604acb77c0c28489744b97c925c08beb

  • SSDEEP

    1536:CTWn1++PJHJXA/OsIZfzc3/Q8asUs6iYid:KQSohsUs6iYid

Score
10/10
ransomwareupx

Malware Config

Targets

    • Target

      cd22ba7b10df8e85062a4e8df18d345048e30ba3e9fe8b700fd1ae096a45ab51

    • Size

      50KB

    • MD5

      479dbf6afa8e08f8c1361693c1c7836a

    • SHA1

      c4607cbaffba2aa78c44ceedb1dfbf2618e9fd8a

    • SHA256

      cd22ba7b10df8e85062a4e8df18d345048e30ba3e9fe8b700fd1ae096a45ab51

    • SHA512

      ea9f39494316ff9ee289c0f9e0cc6be9d10354efbb570460ef536e07edf13ba7b862254885955407468973dd76cf574e604acb77c0c28489744b97c925c08beb

    • SSDEEP

      1536:CTWn1++PJHJXA/OsIZfzc3/Q8asUs6iYid:KQSohsUs6iYid

    Score
    9/10
    ransomwareupx

    • Renames multiple (3505) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX dump on OEP (original entry point)

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks