Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
1f21e8960aa4c82937af6aacc4467b10N.exe
-
Size
51KB
-
Sample
240903-eh4lbaweqk
-
MD5
1f21e8960aa4c82937af6aacc4467b10
-
SHA1
44b80e6ef57fd2c820acb8f9d6088c1ef02371da
-
SHA256
b998575fb4356e0f105159db988244f2c6eaea2ad81a42993cc52caab018cda7
-
SHA512
2231d9d438bc832fa1dfeeff89df4e79bec973832229fe432deecd3a8b9cd36ae2d776c89a487c9feb611fbe5ecf6aa75eb2cfbfc3304e8a824026d2543e886f
-
SSDEEP
768:kBT37CPKKdJJ1EXBwzEXBwdcMcI9B6r4BT37CPKKdJJ1EXBwzEXBwdcMcI9B6rtx:CTW7JJ7TOuTW7JJ7TOtx
Behavioral task
behavioral1
Sample
1f21e8960aa4c82937af6aacc4467b10N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
1f21e8960aa4c82937af6aacc4467b10N.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
1f21e8960aa4c82937af6aacc4467b10N.exe
-
Size
51KB
-
MD5
1f21e8960aa4c82937af6aacc4467b10
-
SHA1
44b80e6ef57fd2c820acb8f9d6088c1ef02371da
-
SHA256
b998575fb4356e0f105159db988244f2c6eaea2ad81a42993cc52caab018cda7
-
SHA512
2231d9d438bc832fa1dfeeff89df4e79bec973832229fe432deecd3a8b9cd36ae2d776c89a487c9feb611fbe5ecf6aa75eb2cfbfc3304e8a824026d2543e886f
-
SSDEEP
768:kBT37CPKKdJJ1EXBwzEXBwdcMcI9B6r4BT37CPKKdJJ1EXBwzEXBwdcMcI9B6rtx:CTW7JJ7TOuTW7JJ7TOtx
Score9/10-
Renames multiple (3648) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-