Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    22530da2089a890d9685439b30279450N.exe

  • Size

    25KB

  • Sample

    240726-sgj26syejg

  • MD5

    22530da2089a890d9685439b30279450

  • SHA1

    6d5d8b3dc4e7de384996b0c88758f58587547763

  • SHA256

    63cd43c3b79b8626075f0da1c8284ac9f142455c774323ae2a2980e048d6bc27

  • SHA512

    aa3aa4c6a69c185ca96474078c5661542881b1a204b0125ca2f34f6131fe2e7fd88f36d2a206b981ad72406259dc83a46cd57967a629880d1dcd4df27423f8fe

  • SSDEEP

    768:kBT37CPKKdJJcbQbf1Oti1JGBQOOiQJhATNyRq5c5XPd:CTW7JJZENTNyI6hPd

Malware Config

Targets

    • Target

      22530da2089a890d9685439b30279450N.exe

    • Size

      25KB

    • MD5

      22530da2089a890d9685439b30279450

    • SHA1

      6d5d8b3dc4e7de384996b0c88758f58587547763

    • SHA256

      63cd43c3b79b8626075f0da1c8284ac9f142455c774323ae2a2980e048d6bc27

    • SHA512

      aa3aa4c6a69c185ca96474078c5661542881b1a204b0125ca2f34f6131fe2e7fd88f36d2a206b981ad72406259dc83a46cd57967a629880d1dcd4df27423f8fe

    • SSDEEP

      768:kBT37CPKKdJJcbQbf1Oti1JGBQOOiQJhATNyRq5c5XPd:CTW7JJZENTNyI6hPd

    • Renames multiple (2820) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks