Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

3

391b125333...0N.exe

windows7-x64

9

391b125333...0N.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    391b1253330fded9d44f4d31d9b2d7d0N.exe

  • Size

    93KB

  • Sample

    240901-e5m7va1gkj

  • MD5

    391b1253330fded9d44f4d31d9b2d7d0

  • SHA1

    962dfcea76196e56aa219477e1c46e6f2c4f04fe

  • SHA256

    ba88c2f922b1fe3250c93ad17bec4f6ee5fd87d7f6c8934e8caa3cfea6dbb866

  • SHA512

    e9a65e42c27b66ec78d38746a9b110a56bcbcb8977ba3d68dbdf78b4194f937b392777d33e3e979bec287f9e39177367dfb30cca12c9c79e89f9c70cb25c9d9b

  • SSDEEP

    1536:p7ZhA7dAxJJB7LD2I2IGYB7ZhA7dAxJJB7LD2I2IGYBrv:Te76xtD33re76xtD33p

Score
9/10
discoveryransomware

Malware Config

Targets

    • Target

      391b1253330fded9d44f4d31d9b2d7d0N.exe

    • Size

      93KB

    • MD5

      391b1253330fded9d44f4d31d9b2d7d0

    • SHA1

      962dfcea76196e56aa219477e1c46e6f2c4f04fe

    • SHA256

      ba88c2f922b1fe3250c93ad17bec4f6ee5fd87d7f6c8934e8caa3cfea6dbb866

    • SHA512

      e9a65e42c27b66ec78d38746a9b110a56bcbcb8977ba3d68dbdf78b4194f937b392777d33e3e979bec287f9e39177367dfb30cca12c9c79e89f9c70cb25c9d9b

    • SSDEEP

      1536:p7ZhA7dAxJJB7LD2I2IGYB7ZhA7dAxJJB7LD2I2IGYBrv:Te76xtD33re76xtD33p

    Score
    9/10
    discoveryransomware

    • Renames multiple (4412) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks