Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

7

b3ebdf27d8...0N.exe

windows7-x64

9

b3ebdf27d8...0N.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b3ebdf27d80a99ea8988060c4c35a4e0N.exe

  • Size

    38KB

  • Sample

    240906-xfvjqssfre

  • MD5

    b3ebdf27d80a99ea8988060c4c35a4e0

  • SHA1

    4f2953a7b03d994b0c153687ea4f956f5f124254

  • SHA256

    9d9baef530027e2be7b80279d8d95393a1c45b47849e851c759610e85627c81a

  • SHA512

    077a30209b9165a9108ad181176ba66a558378bdc1e2a5bb48698f3aab75e148aaffea2f0ad1b3c72237e71f65b646740f0a3984762d7e0e0b6b7f17a8edefd0

  • SSDEEP

    768:kBT37CPKKdJJcbQbf1Oti1JGBQOOiQJhATNydWK9WKF9ADJ59ADJsd4C:CTW7JJZENTNyoKIKMd

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      b3ebdf27d80a99ea8988060c4c35a4e0N.exe

    • Size

      38KB

    • MD5

      b3ebdf27d80a99ea8988060c4c35a4e0

    • SHA1

      4f2953a7b03d994b0c153687ea4f956f5f124254

    • SHA256

      9d9baef530027e2be7b80279d8d95393a1c45b47849e851c759610e85627c81a

    • SHA512

      077a30209b9165a9108ad181176ba66a558378bdc1e2a5bb48698f3aab75e148aaffea2f0ad1b3c72237e71f65b646740f0a3984762d7e0e0b6b7f17a8edefd0

    • SSDEEP

      768:kBT37CPKKdJJcbQbf1Oti1JGBQOOiQJhATNydWK9WKF9ADJ59ADJsd4C:CTW7JJZENTNyoKIKMd

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (3439) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks