Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

7

Trojan.Dan...da.exe

windows7-x64

9

Trojan.Dan...da.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Trojan.Danger.ATA_virussign.com_5fe93dc75aa60c93321b4b91b1ca81da.exe

  • Size

    115KB

  • Sample

    240907-pz1wvswcmm

  • MD5

    5fe93dc75aa60c93321b4b91b1ca81da

  • SHA1

    e881e6aeb09e0fc96f9c75d5d420c41f34651d2b

  • SHA256

    8071fa5a060b5851fabe87f01a7188b57c3cac021aa01c42724d393f7cdab75f

  • SHA512

    d36c0235e290f4362db25429e32b613cefd21abdd1da4f150ebb396c9003dbad1f7493bb280afc3dd7d833d6f277c7aaf501154064ec0880005b8cf40b71f2f2

  • SSDEEP

    1536:V7Zf/FAxTWoJJZENTNyl2Sm0mKuC1TC1PM1mM1XUUgWIVD5IDaGZC09c51+EGgSf:fny1tE42EXUU7964ExSwDG

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      Trojan.Danger.ATA_virussign.com_5fe93dc75aa60c93321b4b91b1ca81da.exe

    • Size

      115KB

    • MD5

      5fe93dc75aa60c93321b4b91b1ca81da

    • SHA1

      e881e6aeb09e0fc96f9c75d5d420c41f34651d2b

    • SHA256

      8071fa5a060b5851fabe87f01a7188b57c3cac021aa01c42724d393f7cdab75f

    • SHA512

      d36c0235e290f4362db25429e32b613cefd21abdd1da4f150ebb396c9003dbad1f7493bb280afc3dd7d833d6f277c7aaf501154064ec0880005b8cf40b71f2f2

    • SSDEEP

      1536:V7Zf/FAxTWoJJZENTNyl2Sm0mKuC1TC1PM1mM1XUUgWIVD5IDaGZC09c51+EGgSf:fny1tE42EXUU7964ExSwDG

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (2850) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks