Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
c1aa5bb4dd29740ccddde53d3c196e50N.exe
-
Size
58KB
-
Sample
240823-fgscbswdld
-
MD5
c1aa5bb4dd29740ccddde53d3c196e50
-
SHA1
23b8a8d912966f07c3b1456dd67cf329d8984045
-
SHA256
1cc38d67115c524f00d05ca835d62d4eeb0c3a4fd41d4a03b0643623f6b21905
-
SHA512
a83a266e9e6a8be2a9c84f7fb1493b4ae133a58244600bffb14899e3a0808ae64a16e6285ac2cc6d03deb632ced0b56879e60c78244aba6672dae37e5b5b930a
-
SSDEEP
768:W7BlpppARFbhFAxC7ntkntV/fo4oIKBKS:W7ZppApryyHb
Static task
static1
Behavioral task
behavioral1
Sample
c1aa5bb4dd29740ccddde53d3c196e50N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c1aa5bb4dd29740ccddde53d3c196e50N.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
c1aa5bb4dd29740ccddde53d3c196e50N.exe
-
Size
58KB
-
MD5
c1aa5bb4dd29740ccddde53d3c196e50
-
SHA1
23b8a8d912966f07c3b1456dd67cf329d8984045
-
SHA256
1cc38d67115c524f00d05ca835d62d4eeb0c3a4fd41d4a03b0643623f6b21905
-
SHA512
a83a266e9e6a8be2a9c84f7fb1493b4ae133a58244600bffb14899e3a0808ae64a16e6285ac2cc6d03deb632ced0b56879e60c78244aba6672dae37e5b5b930a
-
SSDEEP
768:W7BlpppARFbhFAxC7ntkntV/fo4oIKBKS:W7ZppApryyHb
Score9/10-
Renames multiple (415) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-