Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    08b399083ac1e49f4343f4ce032c14b0N.exe

  • Size

    62KB

  • Sample

    240727-1vvd3atfrc

  • MD5

    08b399083ac1e49f4343f4ce032c14b0

  • SHA1

    5982284306d68a178212d391d26e765ee85e5991

  • SHA256

    432a290758e810b1217a4a3f62103419b66e6b3c1fb8252357758e9d895713f4

  • SHA512

    2fd0685098c033acf1ef7508e320021902fed798428ffddaf01550cb095979056486ab1b248e9e3d024e9679a9a6de10a58e9a04656fea54c8e96c670c2f9af6

  • SSDEEP

    768:W7BlpppARFbhjbhQYjYBY7BlpppARFbhjbhQYjYBs:W7ZppApBN7ZppApBz

Score
9/10

Malware Config

Targets

    • Target

      08b399083ac1e49f4343f4ce032c14b0N.exe

    • Size

      62KB

    • MD5

      08b399083ac1e49f4343f4ce032c14b0

    • SHA1

      5982284306d68a178212d391d26e765ee85e5991

    • SHA256

      432a290758e810b1217a4a3f62103419b66e6b3c1fb8252357758e9d895713f4

    • SHA512

      2fd0685098c033acf1ef7508e320021902fed798428ffddaf01550cb095979056486ab1b248e9e3d024e9679a9a6de10a58e9a04656fea54c8e96c670c2f9af6

    • SSDEEP

      768:W7BlpppARFbhjbhQYjYBY7BlpppARFbhjbhQYjYBs:W7ZppApBN7ZppApBz

    Score
    9/10
    • Renames multiple (2832) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks