Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    967a65b09561b0bd482e34399721ce90N.exe

  • Size

    48KB

  • Sample

    240727-fxe2yascpc

  • MD5

    967a65b09561b0bd482e34399721ce90

  • SHA1

    4c34f3095886613a766a369b9ad0d0f2c173783b

  • SHA256

    2ad40e116469a70b7c9b636a4139f2b236de027c9c23e083805760f2067e3f10

  • SHA512

    be115e61f88e975bd4328bc481d808c24eb85d9cd133259bb5bd392c697f565720929069f82f0d692c3d7bd4fd8448e980470b27239e9112b816ee22d9452ee1

  • SSDEEP

    768:V7Blpf/FAK65euBT37CPKKQSjyJJBZBZaOAOIB3jM2jMO/Xufum:V7Zf/FAxTWoJJB7LD2I2IJ

Malware Config

Targets

    • Target

      967a65b09561b0bd482e34399721ce90N.exe

    • Size

      48KB

    • MD5

      967a65b09561b0bd482e34399721ce90

    • SHA1

      4c34f3095886613a766a369b9ad0d0f2c173783b

    • SHA256

      2ad40e116469a70b7c9b636a4139f2b236de027c9c23e083805760f2067e3f10

    • SHA512

      be115e61f88e975bd4328bc481d808c24eb85d9cd133259bb5bd392c697f565720929069f82f0d692c3d7bd4fd8448e980470b27239e9112b816ee22d9452ee1

    • SSDEEP

      768:V7Blpf/FAK65euBT37CPKKQSjyJJBZBZaOAOIB3jM2jMO/Xufum:V7Zf/FAxTWoJJB7LD2I2IJ

    • Renames multiple (2835) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks