Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    a419c693e21e02cd4036836f87ba0960N.exe

  • Size

    33KB

  • Sample

    240901-vb15lsxane

  • MD5

    a419c693e21e02cd4036836f87ba0960

  • SHA1

    16fb778ab3c8764f12904a5d7a2ef828a63a43e5

  • SHA256

    8254f15ef51013017f7486b5e99f067c0855ccfde7e910af13b9e6d0a4329fa5

  • SHA512

    201e79647d1de0a4d48c761c018bdbea44accd83c30d7fae5bd3785642b5e1596c9880952befd139144c83b1d83799f656d83dbb7cdc0ab910eda26ae23f2c2c

  • SSDEEP

    768:kBT37CPKKdJJ1EXBwzEXBwdcMcI9cGsGJKO:CTW7JJ7TyGsGJKO

Malware Config

Targets

    • Target

      a419c693e21e02cd4036836f87ba0960N.exe

    • Size

      33KB

    • MD5

      a419c693e21e02cd4036836f87ba0960

    • SHA1

      16fb778ab3c8764f12904a5d7a2ef828a63a43e5

    • SHA256

      8254f15ef51013017f7486b5e99f067c0855ccfde7e910af13b9e6d0a4329fa5

    • SHA512

      201e79647d1de0a4d48c761c018bdbea44accd83c30d7fae5bd3785642b5e1596c9880952befd139144c83b1d83799f656d83dbb7cdc0ab910eda26ae23f2c2c

    • SSDEEP

      768:kBT37CPKKdJJ1EXBwzEXBwdcMcI9cGsGJKO:CTW7JJ7TyGsGJKO

    • Renames multiple (3456) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks