Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

3

f6d22f9753...21.exe

windows7-x64

9

f6d22f9753...21.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f6d22f9753058a29c49c02736c8255d7789cdd42b6c67ab0e05a32b484c78521

  • Size

    68KB

  • Sample

    240802-hv712sxbla

  • MD5

    7d6f38bfefe0a165f15208a35e206053

  • SHA1

    f37d915a97e652d92111827bb836268efd246812

  • SHA256

    f6d22f9753058a29c49c02736c8255d7789cdd42b6c67ab0e05a32b484c78521

  • SHA512

    5d2f49872383e65a930983a68839eaf10a25c83db9982cd6f0312683f53030c33fc9d73169a5b13c23f299fd2204860d12401226530b67f75490b42bf1ec2045

  • SSDEEP

    384:yBs7Br5xjL8AgA71FbhvsbBs7Br5xjL8AgA71FbhvsuQ9v+H9v+o:/7BlpQpARFbhn7BlpQpARFbh5QQT

Score
9/10
discoveryransomware

Malware Config

Targets

    • Target

      f6d22f9753058a29c49c02736c8255d7789cdd42b6c67ab0e05a32b484c78521

    • Size

      68KB

    • MD5

      7d6f38bfefe0a165f15208a35e206053

    • SHA1

      f37d915a97e652d92111827bb836268efd246812

    • SHA256

      f6d22f9753058a29c49c02736c8255d7789cdd42b6c67ab0e05a32b484c78521

    • SHA512

      5d2f49872383e65a930983a68839eaf10a25c83db9982cd6f0312683f53030c33fc9d73169a5b13c23f299fd2204860d12401226530b67f75490b42bf1ec2045

    • SSDEEP

      384:yBs7Br5xjL8AgA71FbhvsbBs7Br5xjL8AgA71FbhvsuQ9v+H9v+o:/7BlpQpARFbhn7BlpQpARFbh5QQT

    Score
    9/10
    discoveryransomware

    • Renames multiple (4373) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks