Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

3

f6238856a8...51.exe

windows7-x64

9

f6238856a8...51.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f6238856a8ec720c1d2d0ece5e786be28ce5bba965d0a5668dcbaf6b9543b051

  • Size

    180KB

  • Sample

    240806-e3h54stdmc

  • MD5

    17515444433a4a9af11a9c7b68d614fd

  • SHA1

    cb6247318c8f129ba8aecfbb1d6e7af7f60d42e0

  • SHA256

    f6238856a8ec720c1d2d0ece5e786be28ce5bba965d0a5668dcbaf6b9543b051

  • SHA512

    a1f5e77117e81eed7557216dd181216e5694335a5c379f460059dc6269512447a9d4ce63194c02b27b0241959c9bc115d8322173cc4884dda9d8f6f4f34b065f

  • SSDEEP

    3072:6e7WpHIyRF9ESWu0SWujKsKRsP9fVL9ilRe7WpHIyRF9ESWu0SWujKsKRsP9fVLf:RqlIyFESWu0SWu86jYl0qlIyFESWu0S5

Score
9/10
discoveryransomware

Malware Config

Targets

    • Target

      f6238856a8ec720c1d2d0ece5e786be28ce5bba965d0a5668dcbaf6b9543b051

    • Size

      180KB

    • MD5

      17515444433a4a9af11a9c7b68d614fd

    • SHA1

      cb6247318c8f129ba8aecfbb1d6e7af7f60d42e0

    • SHA256

      f6238856a8ec720c1d2d0ece5e786be28ce5bba965d0a5668dcbaf6b9543b051

    • SHA512

      a1f5e77117e81eed7557216dd181216e5694335a5c379f460059dc6269512447a9d4ce63194c02b27b0241959c9bc115d8322173cc4884dda9d8f6f4f34b065f

    • SSDEEP

      3072:6e7WpHIyRF9ESWu0SWujKsKRsP9fVL9ilRe7WpHIyRF9ESWu0SWujKsKRsP9fVLf:RqlIyFESWu0SWu86jYl0qlIyFESWu0S5

    Score
    9/10
    discoveryransomware

    • Renames multiple (4107) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks