Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

7

5f7390f9e4...0N.exe

windows7-x64

9

5f7390f9e4...0N.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5f7390f9e47ee1a86c1886e404183200N.exe

  • Size

    56KB

  • Sample

    240825-gnwh1azdmr

  • MD5

    5f7390f9e47ee1a86c1886e404183200

  • SHA1

    0bd77e5abd375380ccafabacc6b9d4ec10d89ea6

  • SHA256

    300abd09f486e063434fbaa881738da0a5fbcf14c1d70e1dd469e0f78848091a

  • SHA512

    fbf745f36221aa7a435c34a413372700930d843858f7b685ece95a5120d8a8fdaa27e557b8fd5be1d1eca480102f45dfc4b0542276e55d98c0be3b2c646a01c9

  • SSDEEP

    768:kBT37CPKKIm0CAbLg++PJHJzIWD+dVdCYgck5sIZFlzc3/Sg2aDM9uA9DM9uAFIR:CTWn1++PJHJXA/OsIZfzc3/Q8IZT2pO

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      5f7390f9e47ee1a86c1886e404183200N.exe

    • Size

      56KB

    • MD5

      5f7390f9e47ee1a86c1886e404183200

    • SHA1

      0bd77e5abd375380ccafabacc6b9d4ec10d89ea6

    • SHA256

      300abd09f486e063434fbaa881738da0a5fbcf14c1d70e1dd469e0f78848091a

    • SHA512

      fbf745f36221aa7a435c34a413372700930d843858f7b685ece95a5120d8a8fdaa27e557b8fd5be1d1eca480102f45dfc4b0542276e55d98c0be3b2c646a01c9

    • SSDEEP

      768:kBT37CPKKIm0CAbLg++PJHJzIWD+dVdCYgck5sIZFlzc3/Sg2aDM9uA9DM9uAFIR:CTWn1++PJHJXA/OsIZfzc3/Q8IZT2pO

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (3374) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks