Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    4d92d4a94159e9ec8483b9406ec311c0N.exe

  • Size

    168KB

  • Sample

    240803-e49z8atbrj

  • MD5

    4d92d4a94159e9ec8483b9406ec311c0

  • SHA1

    2130be418fc157ea2d1eb3a725b5656eeccb2401

  • SHA256

    b82b62fd240b17a2dd1001816f3994a54589529a4884b5f7b1a22bb44a9b7b34

  • SHA512

    e556af14bd328622e72b63fb405b552ab4febefdb58d255e164817434cfd1680aee07eeb90226c083a3faf9f840150bf1443dbec940f019574f9ac90002d9108

  • SSDEEP

    3072:6e7WpMaxeb0CYJ97lEYNR73e+eBSWSe7WpMaxeb0CYJ97lEYNR73e+eBSWp:RqKvb0CYJ973e+eBSeqKvb0CYJ973e+I

Score
9/10

Malware Config

Targets

    • Target

      4d92d4a94159e9ec8483b9406ec311c0N.exe

    • Size

      168KB

    • MD5

      4d92d4a94159e9ec8483b9406ec311c0

    • SHA1

      2130be418fc157ea2d1eb3a725b5656eeccb2401

    • SHA256

      b82b62fd240b17a2dd1001816f3994a54589529a4884b5f7b1a22bb44a9b7b34

    • SHA512

      e556af14bd328622e72b63fb405b552ab4febefdb58d255e164817434cfd1680aee07eeb90226c083a3faf9f840150bf1443dbec940f019574f9ac90002d9108

    • SSDEEP

      3072:6e7WpMaxeb0CYJ97lEYNR73e+eBSWSe7WpMaxeb0CYJ97lEYNR73e+eBSWp:RqKvb0CYJ973e+eBSeqKvb0CYJ973e+I

    Score
    9/10
    • Renames multiple (3926) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks