Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
52bd311d6e5381c07066678acc8150edbc63c6a697cb94e91e944a12766710dd
-
Size
539KB
-
Sample
240805-1gkygayhjp
-
MD5
6a73584a7fe555203e71ac67472964cc
-
SHA1
dcbf316fe9bdbfa4b94c147785ec0e272ce7ff55
-
SHA256
52bd311d6e5381c07066678acc8150edbc63c6a697cb94e91e944a12766710dd
-
SHA512
216b7efa47ae3caa9048ae149932b9b5aaf7fa288cffabb6789518ae457adcd5ac80032d56fc07caf3000dac18cfe67bdeb998665fc1a52f04cafb78fb1b41ef
-
SSDEEP
6144:RqKvb0CYJ973e+eBSo54oAnjyDdU1sL8Lsw9g09Bp0cV07nNoTWwan7:vvbxYXyS8y+mm8YwBm7fn7
Static task
static1
Behavioral task
behavioral1
Sample
52bd311d6e5381c07066678acc8150edbc63c6a697cb94e91e944a12766710dd.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
52bd311d6e5381c07066678acc8150edbc63c6a697cb94e91e944a12766710dd.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
52bd311d6e5381c07066678acc8150edbc63c6a697cb94e91e944a12766710dd
-
Size
539KB
-
MD5
6a73584a7fe555203e71ac67472964cc
-
SHA1
dcbf316fe9bdbfa4b94c147785ec0e272ce7ff55
-
SHA256
52bd311d6e5381c07066678acc8150edbc63c6a697cb94e91e944a12766710dd
-
SHA512
216b7efa47ae3caa9048ae149932b9b5aaf7fa288cffabb6789518ae457adcd5ac80032d56fc07caf3000dac18cfe67bdeb998665fc1a52f04cafb78fb1b41ef
-
SSDEEP
6144:RqKvb0CYJ973e+eBSo54oAnjyDdU1sL8Lsw9g09Bp0cV07nNoTWwan7:vvbxYXyS8y+mm8YwBm7fn7
Score9/10-
Renames multiple (3661) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-