Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
4758ecb9c5aac5de1be72f3a0cf87bf0N.exe
-
Size
193KB
-
Sample
240802-dqlj2asgpj
-
MD5
4758ecb9c5aac5de1be72f3a0cf87bf0
-
SHA1
3451c2dc6cb9bc9233f021461b409824cb2d6976
-
SHA256
584f59f339694e4423ef8ab1cff4d993a59f6ebdcdbb0548bc02eb8fee503e65
-
SHA512
2b93ed304134281e2d33902d1a32a52c207c93802b0719c15499e43ec021c384a5809ea603c1a00454dadaac0b15c5ae84cab57cf47a32f0ca448442c6566c92
-
SSDEEP
3072:6e7WpvR9vHpKmEGCLOwstyhZFChcssc56FUrgxvbSD4UQrO2ixMl:RqH9/pKvShcHUax
Static task
static1
Behavioral task
behavioral1
Sample
4758ecb9c5aac5de1be72f3a0cf87bf0N.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4758ecb9c5aac5de1be72f3a0cf87bf0N.exe
Resource
win10v2004-20240730-en
Malware Config
Targets
-
-
Target
4758ecb9c5aac5de1be72f3a0cf87bf0N.exe
-
Size
193KB
-
MD5
4758ecb9c5aac5de1be72f3a0cf87bf0
-
SHA1
3451c2dc6cb9bc9233f021461b409824cb2d6976
-
SHA256
584f59f339694e4423ef8ab1cff4d993a59f6ebdcdbb0548bc02eb8fee503e65
-
SHA512
2b93ed304134281e2d33902d1a32a52c207c93802b0719c15499e43ec021c384a5809ea603c1a00454dadaac0b15c5ae84cab57cf47a32f0ca448442c6566c92
-
SSDEEP
3072:6e7WpvR9vHpKmEGCLOwstyhZFChcssc56FUrgxvbSD4UQrO2ixMl:RqH9/pKvShcHUax
Score9/10-
Renames multiple (3247) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-