Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    52bbf36f16a6cac1c54a268de4de3f20N.exe

  • Size

    47KB

  • Sample

    240819-mwcczszcqa

  • MD5

    52bbf36f16a6cac1c54a268de4de3f20

  • SHA1

    d3119d597b2f6b8d8f279795150014261d98a737

  • SHA256

    c7d6b3eb4a69cd60b34db812feabde7be5da4100faed540e784a649588539f92

  • SHA512

    3befaedcab6047af41dd3614298af075da04f5334e95e492c40cdc37ffce437e4b4228231a7bbca772585dbaa3723da8e665b28417f57245899c93170ad0af2e

  • SSDEEP

    768:V7Blpf/FAK65euBT37CPKKQSjyJJcbQbf1Oti1JGBQOOiQJhATBApwpI:V7Zf/FAxTWoJJZENTBAOi

Malware Config

Targets

    • Target

      52bbf36f16a6cac1c54a268de4de3f20N.exe

    • Size

      47KB

    • MD5

      52bbf36f16a6cac1c54a268de4de3f20

    • SHA1

      d3119d597b2f6b8d8f279795150014261d98a737

    • SHA256

      c7d6b3eb4a69cd60b34db812feabde7be5da4100faed540e784a649588539f92

    • SHA512

      3befaedcab6047af41dd3614298af075da04f5334e95e492c40cdc37ffce437e4b4228231a7bbca772585dbaa3723da8e665b28417f57245899c93170ad0af2e

    • SSDEEP

      768:V7Blpf/FAK65euBT37CPKKQSjyJJcbQbf1Oti1JGBQOOiQJhATBApwpI:V7Zf/FAxTWoJJZENTBAOi

    • Renames multiple (3166) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks