Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

3

f6343c256c...cf.exe

windows7-x64

9

f6343c256c...cf.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f6343c256c2e6555f17ccb53f72e4ed9a2ab6b28105dd062089cf0612703decf

  • Size

    113KB

  • Sample

    240913-d8tncssgng

  • MD5

    285df452ce08c5c7faeea83f7a15f75c

  • SHA1

    4fcb2b139434fa5d90ca713489f659e4b5fda1b5

  • SHA256

    f6343c256c2e6555f17ccb53f72e4ed9a2ab6b28105dd062089cf0612703decf

  • SHA512

    18060687ff0af7da8fd979958d2b1300cac4e9c004553428445ccdf181cd5b30e640114bb10e3d4aa42a3bea7722b77bfb7c795a0933c1d975c4d321fa94a22a

  • SSDEEP

    3072:6e7WpwYRY4Y8a3a6e7WpwYRY4Y8a3aR4O:Rq7aCc4q7aCcm4O

Score
9/10
discoveryransomware

Malware Config

Targets

    • Target

      f6343c256c2e6555f17ccb53f72e4ed9a2ab6b28105dd062089cf0612703decf

    • Size

      113KB

    • MD5

      285df452ce08c5c7faeea83f7a15f75c

    • SHA1

      4fcb2b139434fa5d90ca713489f659e4b5fda1b5

    • SHA256

      f6343c256c2e6555f17ccb53f72e4ed9a2ab6b28105dd062089cf0612703decf

    • SHA512

      18060687ff0af7da8fd979958d2b1300cac4e9c004553428445ccdf181cd5b30e640114bb10e3d4aa42a3bea7722b77bfb7c795a0933c1d975c4d321fa94a22a

    • SSDEEP

      3072:6e7WpwYRY4Y8a3a6e7WpwYRY4Y8a3aR4O:Rq7aCc4q7aCcm4O

    Score
    9/10
    discoveryransomware

    • Renames multiple (4143) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks