Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    69ce0c68350b9747b79554f318338620N.exe

  • Size

    75KB

  • Sample

    240820-njdkysyepb

  • MD5

    69ce0c68350b9747b79554f318338620

  • SHA1

    b4dfec13f83c52b283ab656c9dec06952bc7e963

  • SHA256

    4360c26d103a11d4865c61efe7306f32e9c79bad380b7d5ecf1171e22177db6d

  • SHA512

    dbf9380e4c0b14998ec738c57adc5e7fd65ae81e4301c539676f147352bfdaacc64f70379a8b7445995e5d1bbb5629c72979cfe7a794f840a43df6b62a7aff6e

  • SSDEEP

    1536:W7ZppApB7m7ZppApB77KP2awclvmxaKP2awclvmxH:6pWpB7KpWpB72P2awclvmxrP2awclvmN

Score
9/10

Malware Config

Targets

    • Target

      69ce0c68350b9747b79554f318338620N.exe

    • Size

      75KB

    • MD5

      69ce0c68350b9747b79554f318338620

    • SHA1

      b4dfec13f83c52b283ab656c9dec06952bc7e963

    • SHA256

      4360c26d103a11d4865c61efe7306f32e9c79bad380b7d5ecf1171e22177db6d

    • SHA512

      dbf9380e4c0b14998ec738c57adc5e7fd65ae81e4301c539676f147352bfdaacc64f70379a8b7445995e5d1bbb5629c72979cfe7a794f840a43df6b62a7aff6e

    • SSDEEP

      1536:W7ZppApB7m7ZppApB77KP2awclvmxaKP2awclvmxH:6pWpB7KpWpB72P2awclvmxrP2awclvmN

    Score
    9/10
    • Renames multiple (3547) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks