Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
3fda7e5db6661ee56f5b462d3bb9bcf0N.exe
-
Size
82KB
-
Sample
240807-btxelazgne
-
MD5
3fda7e5db6661ee56f5b462d3bb9bcf0
-
SHA1
2638fa6f38380425593a491e8399204dbd9f4388
-
SHA256
e59ae6f4f6a183d6a6027ce9a5c0a41fdd5f3d21a3b0373b83323b237d1534be
-
SHA512
c37b0e2fff7ddc72368440e243a25b96a396b75e88b09595b4d9434fbde388f95794be7b09489244f7f312e8b63854fc90840969f5500057095d37086fed88e7
-
SSDEEP
768:W7BlpppARFbhFAN8ZJymJyQ7BlpppARFbhFAN8ZJymJyy2N2i:W7ZppApFJymJyQ7ZppApFJymJyNoi
Static task
static1
Behavioral task
behavioral1
Sample
3fda7e5db6661ee56f5b462d3bb9bcf0N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3fda7e5db6661ee56f5b462d3bb9bcf0N.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
3fda7e5db6661ee56f5b462d3bb9bcf0N.exe
-
Size
82KB
-
MD5
3fda7e5db6661ee56f5b462d3bb9bcf0
-
SHA1
2638fa6f38380425593a491e8399204dbd9f4388
-
SHA256
e59ae6f4f6a183d6a6027ce9a5c0a41fdd5f3d21a3b0373b83323b237d1534be
-
SHA512
c37b0e2fff7ddc72368440e243a25b96a396b75e88b09595b4d9434fbde388f95794be7b09489244f7f312e8b63854fc90840969f5500057095d37086fed88e7
-
SSDEEP
768:W7BlpppARFbhFAN8ZJymJyQ7BlpppARFbhFAN8ZJymJyy2N2i:W7ZppApFJymJyQ7ZppApFJymJyNoi
Score9/10-
Renames multiple (4220) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-