Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    91af6d4c720287ff4689db2d1a000310N.exe

  • Size

    31KB

  • Sample

    240829-qn1x6atelf

  • MD5

    91af6d4c720287ff4689db2d1a000310

  • SHA1

    911a1ceee67326bb88f25442444f5dbdb3a55a00

  • SHA256

    5e6d62e28b5f39944528ef40d708a06ec10924c24fb2714dbb67bb189f9c5651

  • SHA512

    8698192f9b6b33950939081d0729440af0ec4faebf56930a3a6ad630e57c9df263d537bfdfb3dfb0c6c5d7ab2d7c53c6dbf7731af190232229ca94989562dbaf

  • SSDEEP

    384:QOlIBXDaU7CPKK0TIhfJJ1Evd5BvhzaM9mSIEvd5BvhzaM9mSsxmMxm9+9B0Q0/C:kBT37CPKKdJJ1EXBwzEXBwdcMcI95rv

Malware Config

Targets

    • Target

      91af6d4c720287ff4689db2d1a000310N.exe

    • Size

      31KB

    • MD5

      91af6d4c720287ff4689db2d1a000310

    • SHA1

      911a1ceee67326bb88f25442444f5dbdb3a55a00

    • SHA256

      5e6d62e28b5f39944528ef40d708a06ec10924c24fb2714dbb67bb189f9c5651

    • SHA512

      8698192f9b6b33950939081d0729440af0ec4faebf56930a3a6ad630e57c9df263d537bfdfb3dfb0c6c5d7ab2d7c53c6dbf7731af190232229ca94989562dbaf

    • SSDEEP

      384:QOlIBXDaU7CPKK0TIhfJJ1Evd5BvhzaM9mSIEvd5BvhzaM9mSsxmMxm9+9B0Q0/C:kBT37CPKKdJJ1EXBwzEXBwdcMcI95rv

    • Renames multiple (3372) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks