Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

3

d3c4f93919...d9.exe

windows7-x64

9

d3c4f93919...d9.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d3c4f93919f3ec4dfd7a75e503a9ec81916902a0814e0e5519b85f40d82aa6d9

  • Size

    180KB

  • Sample

    240826-d5zp7ssfle

  • MD5

    9de56565f08cc872bbdfd9ea8df7a6f2

  • SHA1

    4ec420bab1634a4179e9de2620243eba22f53809

  • SHA256

    d3c4f93919f3ec4dfd7a75e503a9ec81916902a0814e0e5519b85f40d82aa6d9

  • SHA512

    5a7bd487d178862d6b200ff10bebd554c4e5e7f305d193737bfa2028136c3d76baf2941661733bb7f6b2b5485d899013939700c16fe66a61ce8b04a306de499e

  • SSDEEP

    1536:W7ZhA7dAvGpG8nbTWJGpG8nZ7ZhA7dAvGpG8nbTWJGpG8nRz:6e76up3nPp3nDe76up3nPp3nRz

Score
9/10
discoveryransomware

Malware Config

Targets

    • Target

      d3c4f93919f3ec4dfd7a75e503a9ec81916902a0814e0e5519b85f40d82aa6d9

    • Size

      180KB

    • MD5

      9de56565f08cc872bbdfd9ea8df7a6f2

    • SHA1

      4ec420bab1634a4179e9de2620243eba22f53809

    • SHA256

      d3c4f93919f3ec4dfd7a75e503a9ec81916902a0814e0e5519b85f40d82aa6d9

    • SHA512

      5a7bd487d178862d6b200ff10bebd554c4e5e7f305d193737bfa2028136c3d76baf2941661733bb7f6b2b5485d899013939700c16fe66a61ce8b04a306de499e

    • SSDEEP

      1536:W7ZhA7dAvGpG8nbTWJGpG8nZ7ZhA7dAvGpG8nbTWJGpG8nRz:6e76up3nPp3nDe76up3nPp3nRz

    Score
    9/10
    discoveryransomware

    • Renames multiple (3658) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks