Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

3

1afbf2ce31...a0.exe

windows7-x64

9

1afbf2ce31...a0.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1afbf2ce31b157382be0dde94adf1ca0.bin

  • Size

    94KB

  • Sample

    240608-b4ebrsgb94

  • MD5

    1afbf2ce31b157382be0dde94adf1ca0

  • SHA1

    3e4a3aec9e5a4ee948bf73b4e03798f852785583

  • SHA256

    910092a3dbf2d67b4f09da87897781da716f9b94afece41b5c4f23cf0ff4e10e

  • SHA512

    6c62f5afe6ab5147fe7523caa253770cb294e34b44e531f5fc66b4ec83e43e99c9e79f7e43cf886bf727d6d1b627d003bb920e1c11578525bc620bd40ca09358

  • SSDEEP

    1536:/7ZQpApze+eJfFpsJOfFpsJm7ZQpApze+eJfFpsJOfFpsJ+X9q:9QWpze+eJfFpsJOfFpsJKQWpze+eJfFo

Score
9/10
ransomware

Malware Config

Targets

    • Target

      1afbf2ce31b157382be0dde94adf1ca0.bin

    • Size

      94KB

    • MD5

      1afbf2ce31b157382be0dde94adf1ca0

    • SHA1

      3e4a3aec9e5a4ee948bf73b4e03798f852785583

    • SHA256

      910092a3dbf2d67b4f09da87897781da716f9b94afece41b5c4f23cf0ff4e10e

    • SHA512

      6c62f5afe6ab5147fe7523caa253770cb294e34b44e531f5fc66b4ec83e43e99c9e79f7e43cf886bf727d6d1b627d003bb920e1c11578525bc620bd40ca09358

    • SSDEEP

      1536:/7ZQpApze+eJfFpsJOfFpsJm7ZQpApze+eJfFpsJOfFpsJ+X9q:9QWpze+eJfFpsJOfFpsJKQWpze+eJfFo

    Score
    9/10
    ransomware

    • Renames multiple (4877) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks