Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    a035c2aa6fd09d7940d4e87a8b0f9dd07aa956c76619f6f1f5b53bb647a9da71

  • Size

    39KB

  • Sample

    240911-kyn4fssblq

  • MD5

    b2993db5ac040b738b51ed65d13d2423

  • SHA1

    48ee199a61c8b0405629c5da6c99bbec6f82cc80

  • SHA256

    a035c2aa6fd09d7940d4e87a8b0f9dd07aa956c76619f6f1f5b53bb647a9da71

  • SHA512

    47afa22ad0bbd482a70cd49fca03498de83bbb8f899172cf202367b6f4ea84ef684f3bb6476a7ee314f5ec85b13206df1b2c4b2dabc4c485ddefed9e540d9bb1

  • SSDEEP

    768:kBT37CPKKdJJcbQbf1Oti1JGBQOOiQJhATBApwp2ZgZ7maPwr0Pwrs:CTW7JJZENTBAOUY7m+wcwI

Malware Config

Targets

    • Target

      a035c2aa6fd09d7940d4e87a8b0f9dd07aa956c76619f6f1f5b53bb647a9da71

    • Size

      39KB

    • MD5

      b2993db5ac040b738b51ed65d13d2423

    • SHA1

      48ee199a61c8b0405629c5da6c99bbec6f82cc80

    • SHA256

      a035c2aa6fd09d7940d4e87a8b0f9dd07aa956c76619f6f1f5b53bb647a9da71

    • SHA512

      47afa22ad0bbd482a70cd49fca03498de83bbb8f899172cf202367b6f4ea84ef684f3bb6476a7ee314f5ec85b13206df1b2c4b2dabc4c485ddefed9e540d9bb1

    • SSDEEP

      768:kBT37CPKKdJJcbQbf1Oti1JGBQOOiQJhATBApwp2ZgZ7maPwr0Pwrs:CTW7JJZENTBAOUY7m+wcwI

    • Renames multiple (4081) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks