Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

7

4b020b5c2b...0N.exe

windows7-x64

9

4b020b5c2b...0N.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4b020b5c2ba64eb8ecd0f8b13dc3cb00N.exe

  • Size

    50KB

  • Sample

    240818-jpxhsswfmr

  • MD5

    4b020b5c2ba64eb8ecd0f8b13dc3cb00

  • SHA1

    6d9cf9ac70b92c5834a2faeab6ae458e854a051d

  • SHA256

    3f5583f75d4367c25a1bdf9ddd1cd1928150b9573ccdaad290c160667b01ad7a

  • SHA512

    9a9f4f447e3d693e34f0c251057c8be36cc725278dee8135664cab236f187b3276773862a5dac317437586eaee9d891b3399fe8e9ba41a953d1599ef1ca39cf8

  • SSDEEP

    768:kBT37CPKK1EXBwzEXBw3sgQw58eGkz2rcuesgQw58eGkz2rcu90TKe+0TKeinMdZ:CTWUnMdyGdy4AnAP4Ww2wg

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      4b020b5c2ba64eb8ecd0f8b13dc3cb00N.exe

    • Size

      50KB

    • MD5

      4b020b5c2ba64eb8ecd0f8b13dc3cb00

    • SHA1

      6d9cf9ac70b92c5834a2faeab6ae458e854a051d

    • SHA256

      3f5583f75d4367c25a1bdf9ddd1cd1928150b9573ccdaad290c160667b01ad7a

    • SHA512

      9a9f4f447e3d693e34f0c251057c8be36cc725278dee8135664cab236f187b3276773862a5dac317437586eaee9d891b3399fe8e9ba41a953d1599ef1ca39cf8

    • SSDEEP

      768:kBT37CPKK1EXBwzEXBw3sgQw58eGkz2rcuesgQw58eGkz2rcu90TKe+0TKeinMdZ:CTWUnMdyGdy4AnAP4Ww2wg

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (3338) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks