Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

3

9226a2af80...c2.exe

windows7-x64

9

9226a2af80...c2.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9226a2af80360c3bc95c04ecef943075777a8b20fc4c7b91aa4610e91a00e6c2

  • Size

    166KB

  • Sample

    240706-amwn2szenj

  • MD5

    d692f8207363a7be473e8646c3abc554

  • SHA1

    1cb043afff7ef5dd1b33d2eeb6dc73fe1e59b2b0

  • SHA256

    9226a2af80360c3bc95c04ecef943075777a8b20fc4c7b91aa4610e91a00e6c2

  • SHA512

    e08a2b8e4c23b2ec3b255071673f4831879f4fba05cd400922cb88e57a5206facf26ab0a03fbc2c737892e2ef2f1afcc6b6e4411e02143a611b73f84b4ee3ce0

  • SSDEEP

    768:/7BlpQpARFbhWGUKBb4JxobNH3bG3bnEXBwzEXBw17BlpQpARFbhWGUKBb4Jxob0:/7ZQpAp+KBpbNX4F7ZQpAp+KBpbNX4z

Score
9/10
ransomware

Malware Config

Targets

    • Target

      9226a2af80360c3bc95c04ecef943075777a8b20fc4c7b91aa4610e91a00e6c2

    • Size

      166KB

    • MD5

      d692f8207363a7be473e8646c3abc554

    • SHA1

      1cb043afff7ef5dd1b33d2eeb6dc73fe1e59b2b0

    • SHA256

      9226a2af80360c3bc95c04ecef943075777a8b20fc4c7b91aa4610e91a00e6c2

    • SHA512

      e08a2b8e4c23b2ec3b255071673f4831879f4fba05cd400922cb88e57a5206facf26ab0a03fbc2c737892e2ef2f1afcc6b6e4411e02143a611b73f84b4ee3ce0

    • SSDEEP

      768:/7BlpQpARFbhWGUKBb4JxobNH3bG3bnEXBwzEXBw17BlpQpARFbhWGUKBb4Jxob0:/7ZQpAp+KBpbNX4F7ZQpAp+KBpbNX4z

    Score
    9/10
    ransomware

    • Renames multiple (4516) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks