Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
fbdf2a8b1dc716a8b123ade5f2817a3659fd3c833947b9e5dbba23c52c87f258
-
Size
396KB
-
Sample
240724-fvnajasgnb
-
MD5
8f0a0561b4782ee9d3565e5ea757fe26
-
SHA1
90a02a26561ddd85721991843be110c30ed6e5ea
-
SHA256
fbdf2a8b1dc716a8b123ade5f2817a3659fd3c833947b9e5dbba23c52c87f258
-
SHA512
cc8fb90d5f0203afd5495832890f2dfca752b92866e2e78218d34084b445ee0a7f3a5de0653d2ae578bd9d3c5e2e7bbc7328a2981632810032f614c8b97b52fa
-
SSDEEP
1536:W7ZhA7pApaX0aX09rv7ZhA7pApaX0aX09rc:6e7WpGlCe7WpGlP
Static task
static1
Behavioral task
behavioral1
Sample
fbdf2a8b1dc716a8b123ade5f2817a3659fd3c833947b9e5dbba23c52c87f258.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
fbdf2a8b1dc716a8b123ade5f2817a3659fd3c833947b9e5dbba23c52c87f258.exe
Resource
win10v2004-20240709-en
Malware Config
Targets
-
-
Target
fbdf2a8b1dc716a8b123ade5f2817a3659fd3c833947b9e5dbba23c52c87f258
-
Size
396KB
-
MD5
8f0a0561b4782ee9d3565e5ea757fe26
-
SHA1
90a02a26561ddd85721991843be110c30ed6e5ea
-
SHA256
fbdf2a8b1dc716a8b123ade5f2817a3659fd3c833947b9e5dbba23c52c87f258
-
SHA512
cc8fb90d5f0203afd5495832890f2dfca752b92866e2e78218d34084b445ee0a7f3a5de0653d2ae578bd9d3c5e2e7bbc7328a2981632810032f614c8b97b52fa
-
SSDEEP
1536:W7ZhA7pApaX0aX09rv7ZhA7pApaX0aX09rc:6e7WpGlCe7WpGlP
Score9/10-
Renames multiple (2954) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-