Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

3

0021888967...0N.exe

windows7-x64

9

0021888967...0N.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0021888967fe80483f2890201d27b2e0N.exe

  • Size

    82KB

  • Sample

    240820-2gk4xawhjh

  • MD5

    0021888967fe80483f2890201d27b2e0

  • SHA1

    d27065e85588dab8989ff1502e3124b7facc388b

  • SHA256

    5533ca1ff3418778340749ce0e364682e9c03380dc7cf5c75f506bef974cfa96

  • SHA512

    ba87fb4d06ad84b42da027fa850642e68bc3be47a87ddd026725bc462d16091954704cf0a8f9cf0484b921e335d96aebac5c7440dc94c1f24d53b4f3c4baaea4

  • SSDEEP

    1536:W7ZhA7pApM21LOA1LOA7ZhA7pApM21LOA1LOZ6Yh44eFZIXHFJV+6Yh44eFZIXH3:6e7WpMgLOiLOAe7WpMgLOiLOu

Score
9/10
discoveryransomware

Malware Config

Targets

    • Target

      0021888967fe80483f2890201d27b2e0N.exe

    • Size

      82KB

    • MD5

      0021888967fe80483f2890201d27b2e0

    • SHA1

      d27065e85588dab8989ff1502e3124b7facc388b

    • SHA256

      5533ca1ff3418778340749ce0e364682e9c03380dc7cf5c75f506bef974cfa96

    • SHA512

      ba87fb4d06ad84b42da027fa850642e68bc3be47a87ddd026725bc462d16091954704cf0a8f9cf0484b921e335d96aebac5c7440dc94c1f24d53b4f3c4baaea4

    • SSDEEP

      1536:W7ZhA7pApM21LOA1LOA7ZhA7pApM21LOA1LOZ6Yh44eFZIXHFJV+6Yh44eFZIXH3:6e7WpMgLOiLOAe7WpMgLOiLOu

    Score
    9/10
    discoveryransomware

    • Renames multiple (4777) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks