Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    c426066556ac5160e9557d7f25d48d673bb05c4549c0b7a807ae02e3d8de0edf

  • Size

    163KB

  • Sample

    240819-bp5keawdqc

  • MD5

    13f21f3b967caa20e87c64f0b0d0076d

  • SHA1

    2f949e8673d433befec43d7e0542ac00b10a34b0

  • SHA256

    c426066556ac5160e9557d7f25d48d673bb05c4549c0b7a807ae02e3d8de0edf

  • SHA512

    6758904d1a77c060649a40d4a5e69dac7565565d377c2c9855572102239495117a5a4a3692ced9b6547e5777099caf11d35373e2c137f305386cfa238e551532

  • SSDEEP

    3072:6e7WpRaSljEe7WpRaSljLyKoIWbsHfySkT5GeCyi348oWGRPOzkjId6q8UdrSD+y:Rq/aGjPq/aGjw

Score
9/10

Malware Config

Targets

    • Target

      c426066556ac5160e9557d7f25d48d673bb05c4549c0b7a807ae02e3d8de0edf

    • Size

      163KB

    • MD5

      13f21f3b967caa20e87c64f0b0d0076d

    • SHA1

      2f949e8673d433befec43d7e0542ac00b10a34b0

    • SHA256

      c426066556ac5160e9557d7f25d48d673bb05c4549c0b7a807ae02e3d8de0edf

    • SHA512

      6758904d1a77c060649a40d4a5e69dac7565565d377c2c9855572102239495117a5a4a3692ced9b6547e5777099caf11d35373e2c137f305386cfa238e551532

    • SSDEEP

      3072:6e7WpRaSljEe7WpRaSljLyKoIWbsHfySkT5GeCyi348oWGRPOzkjId6q8UdrSD+y:Rq/aGjPq/aGjw

    Score
    9/10
    • Renames multiple (3710) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks