Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
Trojan.Danger.ATA_virussign.com_f288f768b07345234b5a7665053bb587.exe
-
Size
40KB
-
Sample
240907-p1h3fawgjg
-
MD5
f288f768b07345234b5a7665053bb587
-
SHA1
edeadaf50e32160ad6b3ef65664c502ebeb0f4c6
-
SHA256
0b2b1291bf52482f2cb3b56cb919775b07d5cbd61363427183f386828cbd79c6
-
SHA512
131eacf2d185a6694ae602f054f30c4b046d24e1624cda7a5bad4639f6a51b0aec1e33bfcde6f9903194f1973c1054280faae26f7ac1e7a292a62079231b6238
-
SSDEEP
768:kBT37CPKKdJJ1EXBwzEXBwdcMcwBcCBcw/tio/tiISKSz3D:CTW7JJ7TTQoQIRU
Behavioral task
behavioral1
Sample
Trojan.Danger.ATA_virussign.com_f288f768b07345234b5a7665053bb587.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
Trojan.Danger.ATA_virussign.com_f288f768b07345234b5a7665053bb587.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
Trojan.Danger.ATA_virussign.com_f288f768b07345234b5a7665053bb587.exe
-
Size
40KB
-
MD5
f288f768b07345234b5a7665053bb587
-
SHA1
edeadaf50e32160ad6b3ef65664c502ebeb0f4c6
-
SHA256
0b2b1291bf52482f2cb3b56cb919775b07d5cbd61363427183f386828cbd79c6
-
SHA512
131eacf2d185a6694ae602f054f30c4b046d24e1624cda7a5bad4639f6a51b0aec1e33bfcde6f9903194f1973c1054280faae26f7ac1e7a292a62079231b6238
-
SSDEEP
768:kBT37CPKKdJJ1EXBwzEXBwdcMcwBcCBcw/tio/tiISKSz3D:CTW7JJ7TTQoQIRU
Score9/10-
Renames multiple (2945) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-