Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    1790c4ec0c85cc3f3ae9f221807cd890N.exe

  • Size

    35KB

  • Sample

    240818-ahymvaxelp

  • MD5

    1790c4ec0c85cc3f3ae9f221807cd890

  • SHA1

    9201afaf685b5622d7197f6f0aa2f94d0ffd7373

  • SHA256

    934ff80e6975a2bb443d570905146aaf5d9ead3efe72619ebd6dfbd94d88a783

  • SHA512

    d78f8220a8a098f9e9f931eec98883b7d39556731a56121cba58ca8273eb55ce007e6246f5ced0750a5db459d6772d9d154d6ce28179a65e348096669f560555

  • SSDEEP

    768:kBT37CPKKdJJ1EXBwzEXBwdcMcwBcCBcw/tio/tiw:CTW7JJ7TTQoQw

Malware Config

Targets

    • Target

      1790c4ec0c85cc3f3ae9f221807cd890N.exe

    • Size

      35KB

    • MD5

      1790c4ec0c85cc3f3ae9f221807cd890

    • SHA1

      9201afaf685b5622d7197f6f0aa2f94d0ffd7373

    • SHA256

      934ff80e6975a2bb443d570905146aaf5d9ead3efe72619ebd6dfbd94d88a783

    • SHA512

      d78f8220a8a098f9e9f931eec98883b7d39556731a56121cba58ca8273eb55ce007e6246f5ced0750a5db459d6772d9d154d6ce28179a65e348096669f560555

    • SSDEEP

      768:kBT37CPKKdJJ1EXBwzEXBwdcMcwBcCBcw/tio/tiw:CTW7JJ7TTQoQw

    • Renames multiple (3369) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks