Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    ba33e1156e31b00a393cc0237de2f610N.exe

  • Size

    28KB

  • Sample

    240821-wem8lawbjm

  • MD5

    ba33e1156e31b00a393cc0237de2f610

  • SHA1

    4f08c51578b52d42ac653b433c895c64722fa1b6

  • SHA256

    2199cabb030cd7f897bb770d8844ad98d7eea50347410f34fc85edbd809b6070

  • SHA512

    5496bb1c6ec66b808ada8a2ca64a297603acdad781a1824b91963fcf69aed05dd37dc5d92edcd664c693fe378f73ef8d813b3657a116727c75e06921ed7b60aa

  • SSDEEP

    384:QOlIBXDaU7CPKK0TIhfJJ1Evd5BvhzaM9mSIEvd5BvhzaM9mSsxmMxm9+9XOjA8h:kBT37CPKKdJJ1EXBwzEXBwdcMcI9ywg

Malware Config

Targets

    • Target

      ba33e1156e31b00a393cc0237de2f610N.exe

    • Size

      28KB

    • MD5

      ba33e1156e31b00a393cc0237de2f610

    • SHA1

      4f08c51578b52d42ac653b433c895c64722fa1b6

    • SHA256

      2199cabb030cd7f897bb770d8844ad98d7eea50347410f34fc85edbd809b6070

    • SHA512

      5496bb1c6ec66b808ada8a2ca64a297603acdad781a1824b91963fcf69aed05dd37dc5d92edcd664c693fe378f73ef8d813b3657a116727c75e06921ed7b60aa

    • SSDEEP

      384:QOlIBXDaU7CPKK0TIhfJJ1Evd5BvhzaM9mSIEvd5BvhzaM9mSsxmMxm9+9XOjA8h:kBT37CPKKdJJ1EXBwzEXBwdcMcI9ywg

    • Renames multiple (3346) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks