Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    3c06a5558d95f4a5ca91fd483320ef80N.exe

  • Size

    67KB

  • Sample

    240906-l588ms1bmh

  • MD5

    3c06a5558d95f4a5ca91fd483320ef80

  • SHA1

    3538a296018ebcf558f2517b0b27baf9b327127f

  • SHA256

    2b339fd3cf5d82a6fed1a68aaaa8237a07e71288b6916abfd154bbf4bf725b4e

  • SHA512

    b64193e1730a52fa5b13a6e2df75c715bf352f26dfbdf41f466e40ac9dcf0839d58638955e2b7318041f006b99c744270fc264206f357fc1fc85c80d6ccb8db2

  • SSDEEP

    768:V7Blpf/FAK65euBT37CPKKQSjyJJ1EXBwzEXBwdcMcwBcCBcw/tio/tiFDFCXXT:V7Zf/FAxTWoJJ7TTQoQFDFCXXT

Malware Config

Targets

    • Target

      3c06a5558d95f4a5ca91fd483320ef80N.exe

    • Size

      67KB

    • MD5

      3c06a5558d95f4a5ca91fd483320ef80

    • SHA1

      3538a296018ebcf558f2517b0b27baf9b327127f

    • SHA256

      2b339fd3cf5d82a6fed1a68aaaa8237a07e71288b6916abfd154bbf4bf725b4e

    • SHA512

      b64193e1730a52fa5b13a6e2df75c715bf352f26dfbdf41f466e40ac9dcf0839d58638955e2b7318041f006b99c744270fc264206f357fc1fc85c80d6ccb8db2

    • SSDEEP

      768:V7Blpf/FAK65euBT37CPKKQSjyJJ1EXBwzEXBwdcMcwBcCBcw/tio/tiFDFCXXT:V7Zf/FAxTWoJJ7TTQoQFDFCXXT

    • Renames multiple (3007) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks