Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    07174ea569325e68e9b46ef90ea7bd60N.exe

  • Size

    144KB

  • Sample

    240824-y54dlsyhnq

  • MD5

    07174ea569325e68e9b46ef90ea7bd60

  • SHA1

    504e35290b5ea5092e96c767534187e05d8cfb75

  • SHA256

    99a5d64cb620c7e145be1b899c4180bca16592fb0445ad206004781313ed8330

  • SHA512

    120b9e0b6f0b6aaf69d84ca4854f7ea9bc1212f913ce9e8d44322a7fbcb991549a5fc63dfbe5221dac90c79f7789b78231cdd1cb0d7ae91c3368eb5279433d46

  • SSDEEP

    3072:9QWpze+eJfFpsJOfFpsJ5DVSWu0SWuiQWpze+eJfFpsJOfFpsJ5DVSWu0SWu7:Lpe+ewDVSWu0SWu+pe+ewDVSWu0SWu7

Score
9/10

Malware Config

Targets

    • Target

      07174ea569325e68e9b46ef90ea7bd60N.exe

    • Size

      144KB

    • MD5

      07174ea569325e68e9b46ef90ea7bd60

    • SHA1

      504e35290b5ea5092e96c767534187e05d8cfb75

    • SHA256

      99a5d64cb620c7e145be1b899c4180bca16592fb0445ad206004781313ed8330

    • SHA512

      120b9e0b6f0b6aaf69d84ca4854f7ea9bc1212f913ce9e8d44322a7fbcb991549a5fc63dfbe5221dac90c79f7789b78231cdd1cb0d7ae91c3368eb5279433d46

    • SSDEEP

      3072:9QWpze+eJfFpsJOfFpsJ5DVSWu0SWuiQWpze+eJfFpsJOfFpsJ5DVSWu0SWu7:Lpe+ewDVSWu0SWu+pe+ewDVSWu0SWu7

    Score
    9/10
    • Renames multiple (3973) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks