Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

3

31b712e8f2...0N.exe

windows7-x64

9

31b712e8f2...0N.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    31b712e8f2aabe527ae5a02cd8e05590N.exe

  • Size

    110KB

  • Sample

    240723-aabs4swgjq

  • MD5

    31b712e8f2aabe527ae5a02cd8e05590

  • SHA1

    4019ea20731bf21ff83b629ef0e92efe2a12919f

  • SHA256

    55a0964623a6bea824f665a4bf8c542b0a7794f6393516f2b75fdb80b11bb350

  • SHA512

    7c0a2907a4fd34f58e540a42872750e02ddb80497b18605454de07719c3d57301c784c7b984b03a93f3af6acb8c97e8e2ce48001ac062572bd72d03eade06366

  • SSDEEP

    1536:W7ZppApBULcfpHLcfpX2/Nw/NwmxR7ZppApBULcfpHLcfpX2/Nw/Nwmx8:6pWpBwchcV2Wx7pWpBwchcV2Wx8

Score
9/10
ransomware

Malware Config

Targets

    • Target

      31b712e8f2aabe527ae5a02cd8e05590N.exe

    • Size

      110KB

    • MD5

      31b712e8f2aabe527ae5a02cd8e05590

    • SHA1

      4019ea20731bf21ff83b629ef0e92efe2a12919f

    • SHA256

      55a0964623a6bea824f665a4bf8c542b0a7794f6393516f2b75fdb80b11bb350

    • SHA512

      7c0a2907a4fd34f58e540a42872750e02ddb80497b18605454de07719c3d57301c784c7b984b03a93f3af6acb8c97e8e2ce48001ac062572bd72d03eade06366

    • SSDEEP

      1536:W7ZppApBULcfpHLcfpX2/Nw/NwmxR7ZppApBULcfpHLcfpX2/Nw/Nwmx8:6pWpBwchcV2Wx7pWpBwchcV2Wx8

    Score
    9/10
    ransomware

    • Renames multiple (4242) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks