Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

7

2e2478e013...0N.exe

windows7-x64

9

2e2478e013...0N.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2e2478e0131bcf5659f8b35bfce8f8d0N.exe

  • Size

    58KB

  • Sample

    240709-f1qmvaxgql

  • MD5

    2e2478e0131bcf5659f8b35bfce8f8d0

  • SHA1

    9a179a770dce30c515b3a8b84cd8606aaa2624d3

  • SHA256

    23f113b56c410d272d4c5f00eaf819356db3b17b106f0fb95ca4a54d69318700

  • SHA512

    4444e66d66405c4098675dd5ba93a482542cf4e47229d00c08699ba3ac46c5d99cc252f0cbc1dc7fa76a2c8feedef85c43b1276882f0ccb177e5d236ac6c8942

  • SSDEEP

    768:kBT37CPKKIm0CAbLg++PJHJzIWD+dVdCYgck5sIZFlzc3/Sg2aDM9uA9DM9uAFzr:CTWn1++PJHJXA/OsIZfzc3/Q8zxSLm

Score
9/10
ransomwareupx

Malware Config

Targets

    • Target

      2e2478e0131bcf5659f8b35bfce8f8d0N.exe

    • Size

      58KB

    • MD5

      2e2478e0131bcf5659f8b35bfce8f8d0

    • SHA1

      9a179a770dce30c515b3a8b84cd8606aaa2624d3

    • SHA256

      23f113b56c410d272d4c5f00eaf819356db3b17b106f0fb95ca4a54d69318700

    • SHA512

      4444e66d66405c4098675dd5ba93a482542cf4e47229d00c08699ba3ac46c5d99cc252f0cbc1dc7fa76a2c8feedef85c43b1276882f0ccb177e5d236ac6c8942

    • SSDEEP

      768:kBT37CPKKIm0CAbLg++PJHJzIWD+dVdCYgck5sIZFlzc3/Sg2aDM9uA9DM9uAFzr:CTWn1++PJHJXA/OsIZfzc3/Q8zxSLm

    Score
    9/10
    ransomwareupx

    • Renames multiple (3324) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks