Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    8b3ade754e009c3bbcae179dfbecc3f0N.exe

  • Size

    89KB

  • Sample

    240903-qbyx2axdjq

  • MD5

    8b3ade754e009c3bbcae179dfbecc3f0

  • SHA1

    1f8f1a02f28b86278107e67717833b35ab8ca4df

  • SHA256

    6f5f96945eb1488c8ed4bad9bc4fc55852a93520a7491568fcb7baa485d1fdd9

  • SHA512

    b4154aa5a4bab62c79b8ac6a9e959ffbf47700c65413cb9d9466626237958c30434d5a8dd854010154d7a075e549c30051968c6d21d713370621ddd0b24264e5

  • SSDEEP

    1536:V7Zf/FAxTWtnMdyGdyoIOIPwXwRsDTsDa:fnyGnCIOIPwXwRsDTsDa

Malware Config

Targets

    • Target

      8b3ade754e009c3bbcae179dfbecc3f0N.exe

    • Size

      89KB

    • MD5

      8b3ade754e009c3bbcae179dfbecc3f0

    • SHA1

      1f8f1a02f28b86278107e67717833b35ab8ca4df

    • SHA256

      6f5f96945eb1488c8ed4bad9bc4fc55852a93520a7491568fcb7baa485d1fdd9

    • SHA512

      b4154aa5a4bab62c79b8ac6a9e959ffbf47700c65413cb9d9466626237958c30434d5a8dd854010154d7a075e549c30051968c6d21d713370621ddd0b24264e5

    • SSDEEP

      1536:V7Zf/FAxTWtnMdyGdyoIOIPwXwRsDTsDa:fnyGnCIOIPwXwRsDTsDa

    • Renames multiple (329) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks