Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    6d75f371a513f1a232faa80902a31d10N.exe

  • Size

    87KB

  • Sample

    240818-be3casxakd

  • MD5

    6d75f371a513f1a232faa80902a31d10

  • SHA1

    15d9685e0d18bf1486cbf4d512552d5d795d6bd9

  • SHA256

    4fbd1800e1e05dde745b5482a232d6d05a9c1c46153fbdc4c93344fd4e451b8b

  • SHA512

    40eb65a0f3729efaccf880390fa4ec6814847fb502dafba18e2215c6d222596a9821b08e5aadbeaf5b8b9c8c482ad7abafc4946fb8df64023e0f044995375589

  • SSDEEP

    768:W7Blp9pARFbhxwWju7Blp9pARFbhxwWji6t:W7Z9pApxwV7Z9pApxw16t

Score
9/10

Malware Config

Targets

    • Target

      6d75f371a513f1a232faa80902a31d10N.exe

    • Size

      87KB

    • MD5

      6d75f371a513f1a232faa80902a31d10

    • SHA1

      15d9685e0d18bf1486cbf4d512552d5d795d6bd9

    • SHA256

      4fbd1800e1e05dde745b5482a232d6d05a9c1c46153fbdc4c93344fd4e451b8b

    • SHA512

      40eb65a0f3729efaccf880390fa4ec6814847fb502dafba18e2215c6d222596a9821b08e5aadbeaf5b8b9c8c482ad7abafc4946fb8df64023e0f044995375589

    • SSDEEP

      768:W7Blp9pARFbhxwWju7Blp9pARFbhxwWji6t:W7Z9pApxwV7Z9pApxw16t

    Score
    9/10
    • Renames multiple (4487) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks