Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    1fd9fc1928a6ba8341866cf6d38d6050N.exe

  • Size

    55KB

  • Sample

    240814-yjkz5swarm

  • MD5

    1fd9fc1928a6ba8341866cf6d38d6050

  • SHA1

    03b34242512521d7f1485bdff0775d5fa6b3246c

  • SHA256

    5fffdbd35c944b6f41cb513c2184c7420520c079916d438097cfa160e20ec005

  • SHA512

    4313976e7f619ffdfd068fac3513010e1beaa71b8729dce5d91a175f127d704f46a386fcdf1a33967de8c869b910ceb5b69f6db34b1aa12b9f99b30b9ba300c6

  • SSDEEP

    1536:CTWn1++PJHJXA/OsIZfzc3/Q8IZTcM4MT:KQSo7Zf

Malware Config

Targets

    • Target

      1fd9fc1928a6ba8341866cf6d38d6050N.exe

    • Size

      55KB

    • MD5

      1fd9fc1928a6ba8341866cf6d38d6050

    • SHA1

      03b34242512521d7f1485bdff0775d5fa6b3246c

    • SHA256

      5fffdbd35c944b6f41cb513c2184c7420520c079916d438097cfa160e20ec005

    • SHA512

      4313976e7f619ffdfd068fac3513010e1beaa71b8729dce5d91a175f127d704f46a386fcdf1a33967de8c869b910ceb5b69f6db34b1aa12b9f99b30b9ba300c6

    • SSDEEP

      1536:CTWn1++PJHJXA/OsIZfzc3/Q8IZTcM4MT:KQSo7Zf

    • Renames multiple (339) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks