Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

3

14b7e08bec...71.exe

windows7-x64

9

14b7e08bec...71.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    14b7e08becb3d90c76deb00fb05769a34b66bfde1c0afe497ee44540eedbe271

  • Size

    97KB

  • Sample

    240901-xntmeayhmk

  • MD5

    c5a907228c815c1d5f1fb75463c1cd8c

  • SHA1

    ae4c48aeb4bdaad02483be82d324e2eed47bc048

  • SHA256

    14b7e08becb3d90c76deb00fb05769a34b66bfde1c0afe497ee44540eedbe271

  • SHA512

    3b30b0c222e9b9270ec9b11745f24a217c4841e3d5ab0e8b06e5cd5ba602c2024c0f102844e000b7b8a75aa3824beaae7ca800e7312087c219e9b4549e999773

  • SSDEEP

    1536:W7ZhA7pApw03vR03v4Yw677ZhA7pApw03vR03v4Yw6a:6e7WpwYRY4Yw6Ze7WpwYRY4Yw6a

Score
9/10
discoveryransomware

Malware Config

Targets

    • Target

      14b7e08becb3d90c76deb00fb05769a34b66bfde1c0afe497ee44540eedbe271

    • Size

      97KB

    • MD5

      c5a907228c815c1d5f1fb75463c1cd8c

    • SHA1

      ae4c48aeb4bdaad02483be82d324e2eed47bc048

    • SHA256

      14b7e08becb3d90c76deb00fb05769a34b66bfde1c0afe497ee44540eedbe271

    • SHA512

      3b30b0c222e9b9270ec9b11745f24a217c4841e3d5ab0e8b06e5cd5ba602c2024c0f102844e000b7b8a75aa3824beaae7ca800e7312087c219e9b4549e999773

    • SSDEEP

      1536:W7ZhA7pApw03vR03v4Yw677ZhA7pApw03vR03v4Yw6a:6e7WpwYRY4Yw6Ze7WpwYRY4Yw6a

    Score
    9/10
    discoveryransomware

    • Renames multiple (4954) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks