Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    48c742691e8c1944fc68bf44be630da0N.exe

  • Size

    36KB

  • Sample

    240829-ndqnbsyclg

  • MD5

    48c742691e8c1944fc68bf44be630da0

  • SHA1

    a2c8041ded913e03eb299e3ed73dd449ad7a7c09

  • SHA256

    0fef482a85d668d5223212f0dd3c2692bb40b54bdf8661ae970e3aface5ed0e4

  • SHA512

    7c4abf4eb7cc2b08bb5dd5f617e716fce7242519001cd64db112a62c4cc9f9b12af2d473bc450f3c25fa0df34a8dce9170990a0dc63aa3b46a212f59733b6a70

  • SSDEEP

    768:kBT37CPKKdJJ1EXBwzEXBwdcMcwBcCBcw/tio/tijcd1:CTW7JJ7TTQoQjcL

Malware Config

Targets

    • Target

      48c742691e8c1944fc68bf44be630da0N.exe

    • Size

      36KB

    • MD5

      48c742691e8c1944fc68bf44be630da0

    • SHA1

      a2c8041ded913e03eb299e3ed73dd449ad7a7c09

    • SHA256

      0fef482a85d668d5223212f0dd3c2692bb40b54bdf8661ae970e3aface5ed0e4

    • SHA512

      7c4abf4eb7cc2b08bb5dd5f617e716fce7242519001cd64db112a62c4cc9f9b12af2d473bc450f3c25fa0df34a8dce9170990a0dc63aa3b46a212f59733b6a70

    • SSDEEP

      768:kBT37CPKKdJJ1EXBwzEXBwdcMcwBcCBcw/tio/tijcd1:CTW7JJ7TTQoQjcL

    • Renames multiple (3449) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks