Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

7

c9e6d01265...e7.exe

windows7-x64

9

c9e6d01265...e7.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c9e6d0126551c606c7b1d851d67bf639e19cc7f778077cdc328893e7c65c1ae7

  • Size

    56KB

  • Sample

    240803-dh5b6s1dkn

  • MD5

    5d3fed6aec1e0d083f4ae26fa69a63e5

  • SHA1

    bf1a3a1f45fdc91dd09c2a741bc77bcc008d14ca

  • SHA256

    c9e6d0126551c606c7b1d851d67bf639e19cc7f778077cdc328893e7c65c1ae7

  • SHA512

    19bb562404c39b62d120c99bd168418a1ca5bf5a6f9e0b40b73975d608414f0603f323ea4c51b974eae45eb8226a9032f76183becb83a0f9124896748077d4d4

  • SSDEEP

    768:V7Blpf/FAK65euBT37CPKKQSjSEXBwzEXBw3sgQw58eGkz2rcuesgQw58eGkz2rR:V7Zf/FAxTWgGpGPwL

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      c9e6d0126551c606c7b1d851d67bf639e19cc7f778077cdc328893e7c65c1ae7

    • Size

      56KB

    • MD5

      5d3fed6aec1e0d083f4ae26fa69a63e5

    • SHA1

      bf1a3a1f45fdc91dd09c2a741bc77bcc008d14ca

    • SHA256

      c9e6d0126551c606c7b1d851d67bf639e19cc7f778077cdc328893e7c65c1ae7

    • SHA512

      19bb562404c39b62d120c99bd168418a1ca5bf5a6f9e0b40b73975d608414f0603f323ea4c51b974eae45eb8226a9032f76183becb83a0f9124896748077d4d4

    • SSDEEP

      768:V7Blpf/FAK65euBT37CPKKQSjSEXBwzEXBw3sgQw58eGkz2rcuesgQw58eGkz2rR:V7Zf/FAxTWgGpGPwL

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (3745) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks