Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    8fc3ca9959579db14810ac7e86363c80N.exe

  • Size

    57KB

  • Sample

    240901-wk8rgsybkc

  • MD5

    8fc3ca9959579db14810ac7e86363c80

  • SHA1

    51280d6796f9c4d3f9bc5d1e863cec5711fbee4a

  • SHA256

    d30c6c04e31930e3c66c06a09ebed7c1a17d1938131a5a115bd55f421ab13559

  • SHA512

    57b0d489d7cbbfd4b05cf69eff0109dae0debaa5a8e773b4326ad27d0779373cf1e38ca990af6e0aceb109c998b55f271c81beeb8355841c5faf4dc327516712

  • SSDEEP

    768:V7Blpf/FAK65euBT37CPKKQSjyJJcbQbf1Oti1JGBQOOiQJhATBaMYN353e353i:V7Zf/FAxTWoJJZENTBTY5

Malware Config

Targets

    • Target

      8fc3ca9959579db14810ac7e86363c80N.exe

    • Size

      57KB

    • MD5

      8fc3ca9959579db14810ac7e86363c80

    • SHA1

      51280d6796f9c4d3f9bc5d1e863cec5711fbee4a

    • SHA256

      d30c6c04e31930e3c66c06a09ebed7c1a17d1938131a5a115bd55f421ab13559

    • SHA512

      57b0d489d7cbbfd4b05cf69eff0109dae0debaa5a8e773b4326ad27d0779373cf1e38ca990af6e0aceb109c998b55f271c81beeb8355841c5faf4dc327516712

    • SSDEEP

      768:V7Blpf/FAK65euBT37CPKKQSjyJJcbQbf1Oti1JGBQOOiQJhATBaMYN353e353i:V7Zf/FAxTWoJJZENTBTY5

    • Renames multiple (3140) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks