Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    bbfdb18691ee1ae51b1c0c717910b830N.exe

  • Size

    73KB

  • Sample

    240727-ndntqswhpp

  • MD5

    bbfdb18691ee1ae51b1c0c717910b830

  • SHA1

    088861bfc3256a858bd90ad7493ed437271ef9b7

  • SHA256

    e5126287a1c716d6952e5caed96327ab47bddb93b9ea9e3bf9d578673768cb81

  • SHA512

    4bff83fe3a7b3b5fdd875f57bb38ba6f42c15281bfdf46101eedd00040a81e03e2e1ed7f728bde88bcb8149c90170a19d8d3baa817497ec24cc7dc1e3e3fdca2

  • SSDEEP

    1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8zxxD2Q:fnyiQSoxQ

Malware Config

Targets

    • Target

      bbfdb18691ee1ae51b1c0c717910b830N.exe

    • Size

      73KB

    • MD5

      bbfdb18691ee1ae51b1c0c717910b830

    • SHA1

      088861bfc3256a858bd90ad7493ed437271ef9b7

    • SHA256

      e5126287a1c716d6952e5caed96327ab47bddb93b9ea9e3bf9d578673768cb81

    • SHA512

      4bff83fe3a7b3b5fdd875f57bb38ba6f42c15281bfdf46101eedd00040a81e03e2e1ed7f728bde88bcb8149c90170a19d8d3baa817497ec24cc7dc1e3e3fdca2

    • SSDEEP

      1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8zxxD2Q:fnyiQSoxQ

    • Renames multiple (1705) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks