Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

3

aad878f6ee...0N.exe

windows7-x64

9

aad878f6ee...0N.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    aad878f6ee28938a633299f6d9b3f7f0N.exe

  • Size

    81KB

  • Sample

    240807-mky3lsxcrr

  • MD5

    aad878f6ee28938a633299f6d9b3f7f0

  • SHA1

    3f1c510f5a9d8df5445b3922b9a19813a2252146

  • SHA256

    f909ff99f32a9ac2da1fa48aff5c44a6e727c0782759851e5437cfa4c428955b

  • SHA512

    c080d475fcfa6cc25b62f54b54f4c9bcbf01e40df7b0f2675f564306f9150c28484e17840efce9a9277fa22466e8e7b68728b9252c1dc88eaa75e7907a0528fc

  • SSDEEP

    768:/7BlpQpARFbhJ/p7BlpQpARFbhJ/rpOpd:/7ZQpApT7ZQpApC

Score
9/10
discoveryransomware

Malware Config

Targets

    • Target

      aad878f6ee28938a633299f6d9b3f7f0N.exe

    • Size

      81KB

    • MD5

      aad878f6ee28938a633299f6d9b3f7f0

    • SHA1

      3f1c510f5a9d8df5445b3922b9a19813a2252146

    • SHA256

      f909ff99f32a9ac2da1fa48aff5c44a6e727c0782759851e5437cfa4c428955b

    • SHA512

      c080d475fcfa6cc25b62f54b54f4c9bcbf01e40df7b0f2675f564306f9150c28484e17840efce9a9277fa22466e8e7b68728b9252c1dc88eaa75e7907a0528fc

    • SSDEEP

      768:/7BlpQpARFbhJ/p7BlpQpARFbhJ/rpOpd:/7ZQpApT7ZQpApC

    Score
    9/10
    discoveryransomware

    • Renames multiple (4291) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks