Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

7

b1f0ea1024...9e.exe

windows7-x64

9

b1f0ea1024...9e.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b1f0ea102421af6c890af16ea9af52e2d211eca4166b9032e043f439e17ab49e

  • Size

    46KB

  • Sample

    240806-bwwabaveqj

  • MD5

    5ada8dd2e50f7144dbf92672ffe3e4bb

  • SHA1

    c75c26f0e956e2c3e4b8586031dfbd849abb404a

  • SHA256

    b1f0ea102421af6c890af16ea9af52e2d211eca4166b9032e043f439e17ab49e

  • SHA512

    4202587e1cb01dec6138504dcb1d01514d89899e35eff107fff6413fb2069887636dde40d31608e407be010b6c1c6f6060dfad366d1fa45a5d35ef1a3c018189

  • SSDEEP

    768:V7Blpf/FAK65euBT37CPKKQSjyJJcbQbf1Oti1JGBQOOiQJhATBxCWi0DZqWOCWi:V7Zf/FAxTWoJJZENTBh

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      b1f0ea102421af6c890af16ea9af52e2d211eca4166b9032e043f439e17ab49e

    • Size

      46KB

    • MD5

      5ada8dd2e50f7144dbf92672ffe3e4bb

    • SHA1

      c75c26f0e956e2c3e4b8586031dfbd849abb404a

    • SHA256

      b1f0ea102421af6c890af16ea9af52e2d211eca4166b9032e043f439e17ab49e

    • SHA512

      4202587e1cb01dec6138504dcb1d01514d89899e35eff107fff6413fb2069887636dde40d31608e407be010b6c1c6f6060dfad366d1fa45a5d35ef1a3c018189

    • SSDEEP

      768:V7Blpf/FAK65euBT37CPKKQSjyJJcbQbf1Oti1JGBQOOiQJhATBxCWi0DZqWOCWi:V7Zf/FAxTWoJJZENTBh

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (3745) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks