Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    e2ab8f8e3ffa1eb5c7ef90bd58f980c0N.exe

  • Size

    77KB

  • Sample

    240818-cmjetssfrj

  • MD5

    e2ab8f8e3ffa1eb5c7ef90bd58f980c0

  • SHA1

    611184473f3e9010bf99261f4ed10f5f832fd24c

  • SHA256

    f0be1651f4737cb16378decfedb7c1cac1f8d27548f1c2f4430516f63f554e54

  • SHA512

    606d3f44231fd9f2378ac009696a7140abbc69a5667155cb92591287c13638d073a00bbb47fc550c74a80fb8aa2b0427b03199d902073d4ff81a2d2475bc7c33

  • SSDEEP

    1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8IZc:fnyiQSo7Zc

Malware Config

Targets

    • Target

      e2ab8f8e3ffa1eb5c7ef90bd58f980c0N.exe

    • Size

      77KB

    • MD5

      e2ab8f8e3ffa1eb5c7ef90bd58f980c0

    • SHA1

      611184473f3e9010bf99261f4ed10f5f832fd24c

    • SHA256

      f0be1651f4737cb16378decfedb7c1cac1f8d27548f1c2f4430516f63f554e54

    • SHA512

      606d3f44231fd9f2378ac009696a7140abbc69a5667155cb92591287c13638d073a00bbb47fc550c74a80fb8aa2b0427b03199d902073d4ff81a2d2475bc7c33

    • SSDEEP

      1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8IZc:fnyiQSo7Zc

    • Renames multiple (2962) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks