Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

3

20c6ad3b1b...6c.exe

windows7-x64

9

20c6ad3b1b...6c.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    20c6ad3b1b38868001d703e5877b73c943ccd4d2e2e6af5ad5d3dece4a1d4e6c

  • Size

    192KB

  • Sample

    240710-ysq8hszcrf

  • MD5

    d28e0eb64e46389d951ea516407a3d7c

  • SHA1

    9ab8ead7ceb8d2ffdb75738de4129e5806087bec

  • SHA256

    20c6ad3b1b38868001d703e5877b73c943ccd4d2e2e6af5ad5d3dece4a1d4e6c

  • SHA512

    795fd7e864f78f1162e8f1fbc4ebe5cda199027acbb41504f5796f467ef1bbf814d509322ba651e46a9533fe4c2983383ab8934b86fa8e85fce1a5f8a4ed897c

  • SSDEEP

    6144:RqKvb0CYJ973e+eKZ/B+qKvb0CYJ973e+eKZ/BU:vvbxYX7Z/B2vbxYX7Z/BU

Score
9/10
ransomware

Malware Config

Targets

    • Target

      20c6ad3b1b38868001d703e5877b73c943ccd4d2e2e6af5ad5d3dece4a1d4e6c

    • Size

      192KB

    • MD5

      d28e0eb64e46389d951ea516407a3d7c

    • SHA1

      9ab8ead7ceb8d2ffdb75738de4129e5806087bec

    • SHA256

      20c6ad3b1b38868001d703e5877b73c943ccd4d2e2e6af5ad5d3dece4a1d4e6c

    • SHA512

      795fd7e864f78f1162e8f1fbc4ebe5cda199027acbb41504f5796f467ef1bbf814d509322ba651e46a9533fe4c2983383ab8934b86fa8e85fce1a5f8a4ed897c

    • SSDEEP

      6144:RqKvb0CYJ973e+eKZ/B+qKvb0CYJ973e+eKZ/BU:vvbxYX7Z/B2vbxYX7Z/BU

    Score
    9/10
    ransomware

    • Renames multiple (908) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks