Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    99df5398e3a96d12ac2532018977d430N.exe

  • Size

    44KB

  • Sample

    240816-zdg7qsvhra

  • MD5

    99df5398e3a96d12ac2532018977d430

  • SHA1

    dbd0ad229d8f394276637208d067006bb914cd4d

  • SHA256

    bc9b420c553e244222f72596fa19c9e65c5055304288c07ab900862c38a238fb

  • SHA512

    57c86cfdccf63fed679eddbe6e97de595434a00584873d669550cf1f91adfba98cc5a663591130ee0536dfb59c6b3bfef236794dfb90b3f2dffeb5c60b8f4797

  • SSDEEP

    384:FBt7Br5xjL2Kd5AsAoh6n5eaOlIBXDaU7CPKK0TIh6SjeYDTcYDTkZW8b8T:V7Blpf/FAK65euBT37CPKK0SjeQT

Malware Config

Targets

    • Target

      99df5398e3a96d12ac2532018977d430N.exe

    • Size

      44KB

    • MD5

      99df5398e3a96d12ac2532018977d430

    • SHA1

      dbd0ad229d8f394276637208d067006bb914cd4d

    • SHA256

      bc9b420c553e244222f72596fa19c9e65c5055304288c07ab900862c38a238fb

    • SHA512

      57c86cfdccf63fed679eddbe6e97de595434a00584873d669550cf1f91adfba98cc5a663591130ee0536dfb59c6b3bfef236794dfb90b3f2dffeb5c60b8f4797

    • SSDEEP

      384:FBt7Br5xjL2Kd5AsAoh6n5eaOlIBXDaU7CPKK0TIh6SjeYDTcYDTkZW8b8T:V7Blpf/FAK65euBT37CPKK0SjeQT

    • Renames multiple (3212) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks