Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
b7de492efa8d6ff8aff98db157f16e27bb12e759f45c6a36e91ba7be70ada563
-
Size
465KB
-
Sample
240711-e6csha1grb
-
MD5
4cb8e637913dbf01188b2d8751f7f866
-
SHA1
d948994130e626aea47ca1f26b7e77a2dd5871cf
-
SHA256
b7de492efa8d6ff8aff98db157f16e27bb12e759f45c6a36e91ba7be70ada563
-
SHA512
de046d0e44cbab57c05de79ca63ce14a13f2d01b6a7fbd03e86de19e2aa56dc0139884a76d326c5c60a1a6b960bff83ba0e13dea1e272635c6628a6736ec4a0d
-
SSDEEP
12288:cNUhiHOR4LucvSFSrux88ndNtJXzLFzio:GUhiHOeE8rin3thLj
Static task
static1
Behavioral task
behavioral1
Sample
b7de492efa8d6ff8aff98db157f16e27bb12e759f45c6a36e91ba7be70ada563.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b7de492efa8d6ff8aff98db157f16e27bb12e759f45c6a36e91ba7be70ada563.exe
Resource
win10v2004-20240709-en
Malware Config
Targets
-
-
Target
b7de492efa8d6ff8aff98db157f16e27bb12e759f45c6a36e91ba7be70ada563
-
Size
465KB
-
MD5
4cb8e637913dbf01188b2d8751f7f866
-
SHA1
d948994130e626aea47ca1f26b7e77a2dd5871cf
-
SHA256
b7de492efa8d6ff8aff98db157f16e27bb12e759f45c6a36e91ba7be70ada563
-
SHA512
de046d0e44cbab57c05de79ca63ce14a13f2d01b6a7fbd03e86de19e2aa56dc0139884a76d326c5c60a1a6b960bff83ba0e13dea1e272635c6628a6736ec4a0d
-
SSDEEP
12288:cNUhiHOR4LucvSFSrux88ndNtJXzLFzio:GUhiHOeE8rin3thLj
Score9/10-
Renames multiple (3745) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-