Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
69ce0c68350b9747b79554f318338620N.exe
-
Size
75KB
-
Sample
240820-njdkysyepb
-
MD5
69ce0c68350b9747b79554f318338620
-
SHA1
b4dfec13f83c52b283ab656c9dec06952bc7e963
-
SHA256
4360c26d103a11d4865c61efe7306f32e9c79bad380b7d5ecf1171e22177db6d
-
SHA512
dbf9380e4c0b14998ec738c57adc5e7fd65ae81e4301c539676f147352bfdaacc64f70379a8b7445995e5d1bbb5629c72979cfe7a794f840a43df6b62a7aff6e
-
SSDEEP
1536:W7ZppApB7m7ZppApB77KP2awclvmxaKP2awclvmxH:6pWpB7KpWpB72P2awclvmxrP2awclvmN
Static task
static1
Behavioral task
behavioral1
Sample
69ce0c68350b9747b79554f318338620N.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
69ce0c68350b9747b79554f318338620N.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
69ce0c68350b9747b79554f318338620N.exe
-
Size
75KB
-
MD5
69ce0c68350b9747b79554f318338620
-
SHA1
b4dfec13f83c52b283ab656c9dec06952bc7e963
-
SHA256
4360c26d103a11d4865c61efe7306f32e9c79bad380b7d5ecf1171e22177db6d
-
SHA512
dbf9380e4c0b14998ec738c57adc5e7fd65ae81e4301c539676f147352bfdaacc64f70379a8b7445995e5d1bbb5629c72979cfe7a794f840a43df6b62a7aff6e
-
SSDEEP
1536:W7ZppApB7m7ZppApB77KP2awclvmxaKP2awclvmxH:6pWpB7KpWpB72P2awclvmxrP2awclvmN
Score9/10-
Renames multiple (3547) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-