Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

Ransom.Win...pt.exe

windows7-x64

7

Ransom.Win...pt.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Ransom.Win32.Tescrypt.pz-deddb8383fc1b2f35138408351d07b090b9bd8dd3bd43e04d5c3ffd42a6d003aN

  • Size

    68KB

  • MD5

    ea181c784d007ed62403d5a6c766a610

  • SHA1

    a0edb8ef1fd5674a36adc48c218ae951cf17d1c3

  • SHA256

    deddb8383fc1b2f35138408351d07b090b9bd8dd3bd43e04d5c3ffd42a6d003a

  • SHA512

    34e7c090f22544f01e416c560bdd510bfcba9e0d002567c6050dfd748000abef1bf61d6704f0cde481f0ac90a62134a3b1cd8c6041708152de2a190422c6572a

  • SSDEEP

    1536:fgWJBwVSclkxvodVSXq7vTFtb47XPArcxvgLLqZ10CmuJdr:fgWJi1kxvqVCq7LFtE7/ArcxkOZ1Bbdr

Score
10/10
upxisfbgozi

Malware Config

Extracted

Family

gozi

Signatures

  • Gozi family
    gozi
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Ransom.Win32.Tescrypt.pz-deddb8383fc1b2f35138408351d07b090b9bd8dd3bd43e04d5c3ffd42a6d003aN
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections