Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

debced1e17...17.exe

windows7-x64

9

debced1e17...17.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    debced1e17201aa410d4dbfb637e359cd8c84619d9fd970f4dc22fb12b9f6517

  • Size

    67KB

  • Sample

    240530-eknb4sef86

  • MD5

    f4ccc7250410e0ea9e27b95b9ebe0a30

  • SHA1

    dfe7808206bd6579ff20449dc24e64e2ae03892e

  • SHA256

    debced1e17201aa410d4dbfb637e359cd8c84619d9fd970f4dc22fb12b9f6517

  • SHA512

    ac6f992212d96d6fca995601dfbe131efb5f9db68ecf8ff5b2af176b3374d754f9ac849000e63a79ff9b4358005a997b73578bef722628da21c9c4c7abb82c38

  • SSDEEP

    768:a7BlpyqaFAK65eCv+cIA0fm7Nm0CAbLg++PJHJzIWD4adZdhAIuZAIuniXC:a7ZyqaFAlsr1++PJHJXFAIuZAIuN

Score
10/10
ransomwareupx

Malware Config

Targets

    • Target

      debced1e17201aa410d4dbfb637e359cd8c84619d9fd970f4dc22fb12b9f6517

    • Size

      67KB

    • MD5

      f4ccc7250410e0ea9e27b95b9ebe0a30

    • SHA1

      dfe7808206bd6579ff20449dc24e64e2ae03892e

    • SHA256

      debced1e17201aa410d4dbfb637e359cd8c84619d9fd970f4dc22fb12b9f6517

    • SHA512

      ac6f992212d96d6fca995601dfbe131efb5f9db68ecf8ff5b2af176b3374d754f9ac849000e63a79ff9b4358005a997b73578bef722628da21c9c4c7abb82c38

    • SSDEEP

      768:a7BlpyqaFAK65eCv+cIA0fm7Nm0CAbLg++PJHJzIWD4adZdhAIuZAIuniXC:a7ZyqaFAlsr1++PJHJXFAIuZAIuN

    Score
    9/10
    ransomwareupx

    • Renames multiple (3538) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX dump on OEP (original entry point)

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks