Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

fdbe9c8109...45.exe

windows7-x64

9

fdbe9c8109...45.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fdbe9c81090ca0e64778667c4f0f194ba023f662a4ea3719d485657d4972b045

  • Size

    146KB

  • Sample

    240609-q5bdtsbc2z

  • MD5

    bce00f0bfd9d91738db568655a6873d0

  • SHA1

    53342931fe3718afb862d97c502d0f04890ddb6f

  • SHA256

    fdbe9c81090ca0e64778667c4f0f194ba023f662a4ea3719d485657d4972b045

  • SHA512

    a6aabbe099491f17f53eeac51f69e323daba9fd04978016ea0a18ed3e65fe24ab3084ded5b5fbf1f7bf368b0fd653bfac90c0b5834afb510a9bce016d4e516e4

  • SSDEEP

    1536:a7ZyqaFAlsr1++PJHJXFAIuZAIuT7ZyqaFAlsr1++PJHJXFAIuZAIuT:enaym3AIuZAIuxnaym3AIuZAIuT

Score
10/10
ransomwareupx

Malware Config

Targets

    • Target

      fdbe9c81090ca0e64778667c4f0f194ba023f662a4ea3719d485657d4972b045

    • Size

      146KB

    • MD5

      bce00f0bfd9d91738db568655a6873d0

    • SHA1

      53342931fe3718afb862d97c502d0f04890ddb6f

    • SHA256

      fdbe9c81090ca0e64778667c4f0f194ba023f662a4ea3719d485657d4972b045

    • SHA512

      a6aabbe099491f17f53eeac51f69e323daba9fd04978016ea0a18ed3e65fe24ab3084ded5b5fbf1f7bf368b0fd653bfac90c0b5834afb510a9bce016d4e516e4

    • SSDEEP

      1536:a7ZyqaFAlsr1++PJHJXFAIuZAIuT7ZyqaFAlsr1++PJHJXFAIuZAIuT:enaym3AIuZAIuxnaym3AIuZAIuT

    Score
    9/10
    ransomwareupx

    • Renames multiple (97) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks