Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    52bd311d6e5381c07066678acc8150edbc63c6a697cb94e91e944a12766710dd

  • Size

    539KB

  • Sample

    240805-1gkygayhjp

  • MD5

    6a73584a7fe555203e71ac67472964cc

  • SHA1

    dcbf316fe9bdbfa4b94c147785ec0e272ce7ff55

  • SHA256

    52bd311d6e5381c07066678acc8150edbc63c6a697cb94e91e944a12766710dd

  • SHA512

    216b7efa47ae3caa9048ae149932b9b5aaf7fa288cffabb6789518ae457adcd5ac80032d56fc07caf3000dac18cfe67bdeb998665fc1a52f04cafb78fb1b41ef

  • SSDEEP

    6144:RqKvb0CYJ973e+eBSo54oAnjyDdU1sL8Lsw9g09Bp0cV07nNoTWwan7:vvbxYXyS8y+mm8YwBm7fn7

Score
9/10

Malware Config

Targets

    • Target

      52bd311d6e5381c07066678acc8150edbc63c6a697cb94e91e944a12766710dd

    • Size

      539KB

    • MD5

      6a73584a7fe555203e71ac67472964cc

    • SHA1

      dcbf316fe9bdbfa4b94c147785ec0e272ce7ff55

    • SHA256

      52bd311d6e5381c07066678acc8150edbc63c6a697cb94e91e944a12766710dd

    • SHA512

      216b7efa47ae3caa9048ae149932b9b5aaf7fa288cffabb6789518ae457adcd5ac80032d56fc07caf3000dac18cfe67bdeb998665fc1a52f04cafb78fb1b41ef

    • SSDEEP

      6144:RqKvb0CYJ973e+eBSo54oAnjyDdU1sL8Lsw9g09Bp0cV07nNoTWwan7:vvbxYXyS8y+mm8YwBm7fn7

    Score
    9/10
    • Renames multiple (3661) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks