Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    79d7816c74a3c3e651ac0bd5a8756390N.exe

  • Size

    71KB

  • Sample

    240817-lm6pssyfmg

  • MD5

    79d7816c74a3c3e651ac0bd5a8756390

  • SHA1

    f8605de38588333619097501c6f659fe2d23c2ca

  • SHA256

    38b1ac3e9f8db8c0bf5138c676dab8898f21859e45ddfc9353f66f10ba00e6d9

  • SHA512

    d3e27e1be552b156b1328723599617c62160787603c0fb7ce1ba3cf67eebfd92b415e55f805ab07069b57a180bf4660f8b237ce21ebc65fc82a40850ff6f10f8

  • SSDEEP

    1536:a7ZyqaFAxTWH1++PJHJXA/OsIZfzc3/Q8Q8/8fCIqwq+:enaypQSosk7Nz

Malware Config

Targets

    • Target

      79d7816c74a3c3e651ac0bd5a8756390N.exe

    • Size

      71KB

    • MD5

      79d7816c74a3c3e651ac0bd5a8756390

    • SHA1

      f8605de38588333619097501c6f659fe2d23c2ca

    • SHA256

      38b1ac3e9f8db8c0bf5138c676dab8898f21859e45ddfc9353f66f10ba00e6d9

    • SHA512

      d3e27e1be552b156b1328723599617c62160787603c0fb7ce1ba3cf67eebfd92b415e55f805ab07069b57a180bf4660f8b237ce21ebc65fc82a40850ff6f10f8

    • SSDEEP

      1536:a7ZyqaFAxTWH1++PJHJXA/OsIZfzc3/Q8Q8/8fCIqwq+:enaypQSosk7Nz

    • Renames multiple (3150) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks