Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    a37cbe8e0f11353501983b6c57216f50N.exe

  • Size

    131KB

  • Sample

    240902-f8allatgma

  • MD5

    a37cbe8e0f11353501983b6c57216f50

  • SHA1

    192a91b2cdb2b4e731d4bbf7e765406a5624ed13

  • SHA256

    99bc46aa88d4ca8aa6e09cfac1117660d48c002e970957b81bf4a9a6aa068121

  • SHA512

    5ad7c79dc8d972dec9ee56808ea1e1be5ea3669a4ee98699cc2c50106c0a0c65cb68cfd6fbac398b27b6019927f07d1a27463ceea80bd2e73dad445b269a8407

  • SSDEEP

    1536:V7Zf/FAxTWoJJZENTNyavf73tQqarjrATW7JJZENTNyavf73tQqarjry:fny1tEvfjqqmtEvfjqqH

Malware Config

Targets

    • Target

      a37cbe8e0f11353501983b6c57216f50N.exe

    • Size

      131KB

    • MD5

      a37cbe8e0f11353501983b6c57216f50

    • SHA1

      192a91b2cdb2b4e731d4bbf7e765406a5624ed13

    • SHA256

      99bc46aa88d4ca8aa6e09cfac1117660d48c002e970957b81bf4a9a6aa068121

    • SHA512

      5ad7c79dc8d972dec9ee56808ea1e1be5ea3669a4ee98699cc2c50106c0a0c65cb68cfd6fbac398b27b6019927f07d1a27463ceea80bd2e73dad445b269a8407

    • SSDEEP

      1536:V7Zf/FAxTWoJJZENTNyavf73tQqarjrATW7JJZENTNyavf73tQqarjry:fny1tEvfjqqmtEvfjqqH

    • Renames multiple (2883) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks