Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    aace612c922f451c1dee7d54b60485f0N.exe

  • Size

    625KB

  • Sample

    240902-b1b28syfpb

  • MD5

    aace612c922f451c1dee7d54b60485f0

  • SHA1

    1fe239d69ca03128e6ac37a2135b298e0c436a09

  • SHA256

    9cb372edffe9ea9a883ebba1038d569b8aa1dd528cdc707ac05f862544c446c2

  • SHA512

    1932bfb6a651723bde6964fe30e3142e8b3f147d58de6b964937e1fd4814957bd5812bf28eed4dac20ce097b4999e069347a0c2cf232d378e02098e977d07153

  • SSDEEP

    6144:SeWQSoOf5uKhbSnHXBMV5jdCBjtsD52dmdLqff86+jVvaYMLOen9Bp1xf2ODuYMY:yQtOUVRMstsD5pAfujVvaYML59RIgR

Score
9/10

Malware Config

Targets

    • Target

      aace612c922f451c1dee7d54b60485f0N.exe

    • Size

      625KB

    • MD5

      aace612c922f451c1dee7d54b60485f0

    • SHA1

      1fe239d69ca03128e6ac37a2135b298e0c436a09

    • SHA256

      9cb372edffe9ea9a883ebba1038d569b8aa1dd528cdc707ac05f862544c446c2

    • SHA512

      1932bfb6a651723bde6964fe30e3142e8b3f147d58de6b964937e1fd4814957bd5812bf28eed4dac20ce097b4999e069347a0c2cf232d378e02098e977d07153

    • SSDEEP

      6144:SeWQSoOf5uKhbSnHXBMV5jdCBjtsD52dmdLqff86+jVvaYMLOen9Bp1xf2ODuYMY:yQtOUVRMstsD5pAfujVvaYML59RIgR

    Score
    9/10
    • Renames multiple (2867) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks