Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

3

408954f696...80.exe

windows7-x64

9

408954f696...80.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    408954f696d503f21b6106ccd610fa80.exe

  • Size

    174KB

  • Sample

    240706-ez1kzsyakf

  • MD5

    408954f696d503f21b6106ccd610fa80

  • SHA1

    e533f3c43b1b52a103adf39538ff477c88dda1f3

  • SHA256

    e5d6c61bbf8043d6b290aacaf64382c4e2b6cb38bd1facbd08c9b7232e43df21

  • SHA512

    ff3c857d272b0c4212f54d6c43a0d93c3a71a1647bd5602d6b426f6d0350053fa03f08ba0dfdcdc05aed5bbc25e1a2d73813928c3a8fa20c1d0b0b515c7adf06

  • SSDEEP

    1536:W7ZDpApYbWjIoPyPoLzV7c6ShLDw1wxh6hw7ZDpApYbWjIoPyPoLzV7c6ShLDw1+:6DWp6Dw1wxh6hwDWp6Dw1wF

Score
9/10
ransomware

Malware Config

Targets

    • Target

      408954f696d503f21b6106ccd610fa80.exe

    • Size

      174KB

    • MD5

      408954f696d503f21b6106ccd610fa80

    • SHA1

      e533f3c43b1b52a103adf39538ff477c88dda1f3

    • SHA256

      e5d6c61bbf8043d6b290aacaf64382c4e2b6cb38bd1facbd08c9b7232e43df21

    • SHA512

      ff3c857d272b0c4212f54d6c43a0d93c3a71a1647bd5602d6b426f6d0350053fa03f08ba0dfdcdc05aed5bbc25e1a2d73813928c3a8fa20c1d0b0b515c7adf06

    • SSDEEP

      1536:W7ZDpApYbWjIoPyPoLzV7c6ShLDw1wxh6hw7ZDpApYbWjIoPyPoLzV7c6ShLDw1+:6DWp6Dw1wxh6hwDWp6Dw1wF

    Score
    9/10
    ransomware

    • Renames multiple (3893) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks