Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    bb08662d43b96e30e85844ccd4d43dc0N.exe

  • Size

    216KB

  • Sample

    240807-n362lsyclp

  • MD5

    bb08662d43b96e30e85844ccd4d43dc0

  • SHA1

    bf2a464607411066caf98ea41a317b2c3fdfed96

  • SHA256

    7f996d077de22490f013c35420b87c171bb0a8c5ba445c476dbd736f8594e34f

  • SHA512

    a166a1999948bbee712cd076a239038f57dd3df866e72725fb24e953db17b0e726203f9baebef5d1ed12d14ccfd290d579e187675e2cfb457a427b2d8a96da75

  • SSDEEP

    6144:RqKvb0CYJ973e+eKZ0V/qKvb0CYJ973e+eKZ0VR:vvbxYX7Z0VRvbxYX7Z0VR

Score
9/10

Malware Config

Targets

    • Target

      bb08662d43b96e30e85844ccd4d43dc0N.exe

    • Size

      216KB

    • MD5

      bb08662d43b96e30e85844ccd4d43dc0

    • SHA1

      bf2a464607411066caf98ea41a317b2c3fdfed96

    • SHA256

      7f996d077de22490f013c35420b87c171bb0a8c5ba445c476dbd736f8594e34f

    • SHA512

      a166a1999948bbee712cd076a239038f57dd3df866e72725fb24e953db17b0e726203f9baebef5d1ed12d14ccfd290d579e187675e2cfb457a427b2d8a96da75

    • SSDEEP

      6144:RqKvb0CYJ973e+eKZ0V/qKvb0CYJ973e+eKZ0VR:vvbxYX7Z0VRvbxYX7Z0VR

    Score
    9/10
    • Renames multiple (3045) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks