Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

3

ec455044f4...c5.exe

windows7-x64

9

ec455044f4...c5.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ec455044f4e43ad62b6dec4e52cb3efffe1e3a1e85b371b420865c7a751de5c5

  • Size

    170KB

  • Sample

    240809-edca9szejh

  • MD5

    4d204fccaa3688048151e8977015a644

  • SHA1

    da6234ee23205a5c53f75dcc6e096b47efabb695

  • SHA256

    ec455044f4e43ad62b6dec4e52cb3efffe1e3a1e85b371b420865c7a751de5c5

  • SHA512

    1bf0171d9f02dd00005e6845fbfc6d2e136c409461a135e116f147a89c9596becb6fa7ae178b5d19404769eae1c7de03114b13bc29ae0739d8f18bfa29a8fbcd

  • SSDEEP

    3072:6pWpUFpEhLfyBtPf50FWkFpPDze/qFsxEhLfyBtPf50FWkFpPDze/qFslEhLfyBi:PqFF2Ie+eFYDPqFF2Ie+eFYDt

Score
9/10
discoveryransomware

Malware Config

Targets

    • Target

      ec455044f4e43ad62b6dec4e52cb3efffe1e3a1e85b371b420865c7a751de5c5

    • Size

      170KB

    • MD5

      4d204fccaa3688048151e8977015a644

    • SHA1

      da6234ee23205a5c53f75dcc6e096b47efabb695

    • SHA256

      ec455044f4e43ad62b6dec4e52cb3efffe1e3a1e85b371b420865c7a751de5c5

    • SHA512

      1bf0171d9f02dd00005e6845fbfc6d2e136c409461a135e116f147a89c9596becb6fa7ae178b5d19404769eae1c7de03114b13bc29ae0739d8f18bfa29a8fbcd

    • SSDEEP

      3072:6pWpUFpEhLfyBtPf50FWkFpPDze/qFsxEhLfyBtPf50FWkFpPDze/qFslEhLfyBi:PqFF2Ie+eFYDPqFF2Ie+eFYDt

    Score
    9/10
    discoveryransomware

    • Renames multiple (4703) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks