Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    8e51904330eae5bcfa13b6742159f8a0N.exe

  • Size

    36KB

  • Sample

    240901-w6a3cayclm

  • MD5

    8e51904330eae5bcfa13b6742159f8a0

  • SHA1

    516499c2849e8712552720a9745a25d049d47fdc

  • SHA256

    c6881e3391d157a1c6ff631617d88394092fb098b647a624c1a86309f7fe8c31

  • SHA512

    1a7630938d95caa29c684e9df01ccaaf4bf30b8154044fefaf90dd05d66233eb8684ff2381dae2512430d04203f1d65443e42418038a0ab051c43fbf98bd5a15

  • SSDEEP

    768:kBT37CPKKdJJ1EXBwzEXBwdcMcI9cGsGWoyoh:CTW7JJ7TyGsGDXh

Malware Config

Targets

    • Target

      8e51904330eae5bcfa13b6742159f8a0N.exe

    • Size

      36KB

    • MD5

      8e51904330eae5bcfa13b6742159f8a0

    • SHA1

      516499c2849e8712552720a9745a25d049d47fdc

    • SHA256

      c6881e3391d157a1c6ff631617d88394092fb098b647a624c1a86309f7fe8c31

    • SHA512

      1a7630938d95caa29c684e9df01ccaaf4bf30b8154044fefaf90dd05d66233eb8684ff2381dae2512430d04203f1d65443e42418038a0ab051c43fbf98bd5a15

    • SSDEEP

      768:kBT37CPKKdJJ1EXBwzEXBwdcMcI9cGsGWoyoh:CTW7JJ7TyGsGDXh

    • Renames multiple (2932) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks