Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

3

59738f932b...7N.exe

windows7-x64

9

59738f932b...7N.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    59738f932bee22e8f3b43c8f8a35d08437055da76a5d3678d6458c01f25ff497N

  • Size

    77KB

  • Sample

    240919-bj5cfstajr

  • MD5

    731911736b4b2c9bf97c5401aa864fe0

  • SHA1

    19b0454494eaad358aa71a4c8886bfd11dfe341a

  • SHA256

    59738f932bee22e8f3b43c8f8a35d08437055da76a5d3678d6458c01f25ff497

  • SHA512

    c20aa8fb14e43eeb1bd2c12dce7f93ce87ae847821eca242ebdbb4328a7f963ca3143099f095e64e05da680a1b32e17fb633aa2c71f932ccef028f7279eb00da

  • SSDEEP

    768:W7Blp9pARFbhDF/MF/S7Blp9pARFbhDF/MF/T:W7Z9pApB267Z9pApB27

Score
9/10
discoveryransomware

Malware Config

Targets

    • Target

      59738f932bee22e8f3b43c8f8a35d08437055da76a5d3678d6458c01f25ff497N

    • Size

      77KB

    • MD5

      731911736b4b2c9bf97c5401aa864fe0

    • SHA1

      19b0454494eaad358aa71a4c8886bfd11dfe341a

    • SHA256

      59738f932bee22e8f3b43c8f8a35d08437055da76a5d3678d6458c01f25ff497

    • SHA512

      c20aa8fb14e43eeb1bd2c12dce7f93ce87ae847821eca242ebdbb4328a7f963ca3143099f095e64e05da680a1b32e17fb633aa2c71f932ccef028f7279eb00da

    • SSDEEP

      768:W7Blp9pARFbhDF/MF/S7Blp9pARFbhDF/MF/T:W7Z9pApB267Z9pApB27

    Score
    9/10
    discoveryransomware

    • Renames multiple (4556) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks