Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
4fdc642ab4a60b9df648f123cc782d60N.exe
-
Size
81KB
-
Sample
240821-fcaayszhlc
-
MD5
4fdc642ab4a60b9df648f123cc782d60
-
SHA1
8ca2294d452ec37f61ac3c300a4121b1d4162067
-
SHA256
5161962ae5a17a61ee2551c26e210cd5e2aaf801d0ac3bd80996628cec69dcc3
-
SHA512
5ec487679db2a35bc7910d35dc2e971b65d85d3841fb4e7bd764d3ddd34f3fc3f0f20577c4dd209a92d7cb8e3f7cc38b4da5ae8adfe57ee407ddb1c0790f4140
-
SSDEEP
1536:/7ZQpApze+eJfFpsJOfFpsJeFrxFrd4676rc:9QWpze+eJfFpsJOfFpsJ0rDrNN
Static task
static1
Behavioral task
behavioral1
Sample
4fdc642ab4a60b9df648f123cc782d60N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4fdc642ab4a60b9df648f123cc782d60N.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
4fdc642ab4a60b9df648f123cc782d60N.exe
-
Size
81KB
-
MD5
4fdc642ab4a60b9df648f123cc782d60
-
SHA1
8ca2294d452ec37f61ac3c300a4121b1d4162067
-
SHA256
5161962ae5a17a61ee2551c26e210cd5e2aaf801d0ac3bd80996628cec69dcc3
-
SHA512
5ec487679db2a35bc7910d35dc2e971b65d85d3841fb4e7bd764d3ddd34f3fc3f0f20577c4dd209a92d7cb8e3f7cc38b4da5ae8adfe57ee407ddb1c0790f4140
-
SSDEEP
1536:/7ZQpApze+eJfFpsJOfFpsJeFrxFrd4676rc:9QWpze+eJfFpsJOfFpsJ0rDrNN
Score9/10-
Renames multiple (318) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-