Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    087f5abb6cda3698decb647e78c25790N.exe

  • Size

    75KB

  • Sample

    240726-pfngesxaqj

  • MD5

    087f5abb6cda3698decb647e78c25790

  • SHA1

    a78d84c5d992c67ac69cf06e55fb6003349a7108

  • SHA256

    04f0812530e811a004a40f0cc180d648e8258831fc3d5f2236de52516a5bedd5

  • SHA512

    c145c2d89d4bdb43f212822872d08954fb850ff04eb23a9c58e1d98e0c94f97422755abbe0cbe10c72792026e76a7a8b4192cd402c91f84426dadb580dad0655

  • SSDEEP

    1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8zxs:fnyiQSox

Malware Config

Targets

    • Target

      087f5abb6cda3698decb647e78c25790N.exe

    • Size

      75KB

    • MD5

      087f5abb6cda3698decb647e78c25790

    • SHA1

      a78d84c5d992c67ac69cf06e55fb6003349a7108

    • SHA256

      04f0812530e811a004a40f0cc180d648e8258831fc3d5f2236de52516a5bedd5

    • SHA512

      c145c2d89d4bdb43f212822872d08954fb850ff04eb23a9c58e1d98e0c94f97422755abbe0cbe10c72792026e76a7a8b4192cd402c91f84426dadb580dad0655

    • SSDEEP

      1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8zxs:fnyiQSox

    • Renames multiple (253) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks