Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    8531ac2d1ce705bbc2ffda84200f4fa0N.exe

  • Size

    54KB

  • Sample

    240806-kn3h4avdpl

  • MD5

    8531ac2d1ce705bbc2ffda84200f4fa0

  • SHA1

    62df8dfeea0171dfb14108435604513cc01e6587

  • SHA256

    a3286bd588c5b7d898a259088fdb22196dcd55ef55e6371d9677ea362cc342a7

  • SHA512

    c9b2e7f537d4598e497386728798ba6fa9156c6a27cd43db9891555d0077d0e9949ed336fbc4bb089c5ac01e6f715bd17c1b802b99d493c08b1e4cdc24a552ad

  • SSDEEP

    1536:CTWn1++PJHJXA/OsIZfzc3/Q8+g9VyjVyKQpVQpe:KQSoP+3

Malware Config

Targets

    • Target

      8531ac2d1ce705bbc2ffda84200f4fa0N.exe

    • Size

      54KB

    • MD5

      8531ac2d1ce705bbc2ffda84200f4fa0

    • SHA1

      62df8dfeea0171dfb14108435604513cc01e6587

    • SHA256

      a3286bd588c5b7d898a259088fdb22196dcd55ef55e6371d9677ea362cc342a7

    • SHA512

      c9b2e7f537d4598e497386728798ba6fa9156c6a27cd43db9891555d0077d0e9949ed336fbc4bb089c5ac01e6f715bd17c1b802b99d493c08b1e4cdc24a552ad

    • SSDEEP

      1536:CTWn1++PJHJXA/OsIZfzc3/Q8+g9VyjVyKQpVQpe:KQSoP+3

    • Renames multiple (3238) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks