Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

7

c80ee477f3...7a.exe

windows7-x64

9

c80ee477f3...7a.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c80ee477f36f2d1bf99675028b15a0277f8216aa72ede2eb53e86e7400881d7a

  • Size

    90KB

  • Sample

    240711-f9jwnatfjf

  • MD5

    c13593d90c43ac50cf0ce40db4f56e1c

  • SHA1

    6b4123a2e4c11791898e75ae528b87cab2a28c74

  • SHA256

    c80ee477f36f2d1bf99675028b15a0277f8216aa72ede2eb53e86e7400881d7a

  • SHA512

    7a798f9a43b36f20ac795d09f20c2429f2aeccd6942b62baad73478570eee5568974edb2b6c8b9e96b84f4e6874202a0a5b393c8e85851d41f36a6cb29bf4652

  • SSDEEP

    1536:CTWn1++PJHJXA/OsIZfzc3/Q8zxoJTWn1++PJHJXA/OsIZfzc3/Q8zxc:KQSoHQSox

Score
9/10
ransomwareupx

Malware Config

Targets

    • Target

      c80ee477f36f2d1bf99675028b15a0277f8216aa72ede2eb53e86e7400881d7a

    • Size

      90KB

    • MD5

      c13593d90c43ac50cf0ce40db4f56e1c

    • SHA1

      6b4123a2e4c11791898e75ae528b87cab2a28c74

    • SHA256

      c80ee477f36f2d1bf99675028b15a0277f8216aa72ede2eb53e86e7400881d7a

    • SHA512

      7a798f9a43b36f20ac795d09f20c2429f2aeccd6942b62baad73478570eee5568974edb2b6c8b9e96b84f4e6874202a0a5b393c8e85851d41f36a6cb29bf4652

    • SSDEEP

      1536:CTWn1++PJHJXA/OsIZfzc3/Q8zxoJTWn1++PJHJXA/OsIZfzc3/Q8zxc:KQSoHQSox

    Score
    9/10
    ransomwareupx

    • Renames multiple (4879) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks