Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    960ee2a99a684fc03d99e37d073f30dd30917849b3a4944b2cc55ee55d2ae3c4

  • Size

    51KB

  • Sample

    240817-cwkz1svgnk

  • MD5

    90a77ed6a065d9efb835c08fe83bfbdc

  • SHA1

    20ad5a0e840ad9b6cdc6215b9c055b68603f73b8

  • SHA256

    960ee2a99a684fc03d99e37d073f30dd30917849b3a4944b2cc55ee55d2ae3c4

  • SHA512

    b38642106aa3fe42b54e309610872dd87fbd2b36c2fe95c7148cee10249cb72a325e20823731acf18b14a0da6b73ee722eb524b1eb521ceb21b011728ed194d0

  • SSDEEP

    768:V7Blpf/FAK65euBT37CPKKQSjyJJ1EXBwzEXBwdcMcI9f/Gum/Guv:V7Zf/FAxTWoJJ7TA

Malware Config

Targets

    • Target

      960ee2a99a684fc03d99e37d073f30dd30917849b3a4944b2cc55ee55d2ae3c4

    • Size

      51KB

    • MD5

      90a77ed6a065d9efb835c08fe83bfbdc

    • SHA1

      20ad5a0e840ad9b6cdc6215b9c055b68603f73b8

    • SHA256

      960ee2a99a684fc03d99e37d073f30dd30917849b3a4944b2cc55ee55d2ae3c4

    • SHA512

      b38642106aa3fe42b54e309610872dd87fbd2b36c2fe95c7148cee10249cb72a325e20823731acf18b14a0da6b73ee722eb524b1eb521ceb21b011728ed194d0

    • SSDEEP

      768:V7Blpf/FAK65euBT37CPKKQSjyJJ1EXBwzEXBwdcMcI9f/Gum/Guv:V7Zf/FAxTWoJJ7TA

    • Renames multiple (3820) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks