Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

3

a6cd0bc9e6...2N.exe

windows7-x64

9

a6cd0bc9e6...2N.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a6cd0bc9e65e58ace57f347241d13c3d2d8fd7b597a4f3de9ed19506a8250ec2N

  • Size

    179KB

  • Sample

    240919-gezjastepq

  • MD5

    0e7f8494d80e71b11fa4a65f025e52f0

  • SHA1

    2666ab5b527e8fe19b4604b622803bc61e9bccdd

  • SHA256

    a6cd0bc9e65e58ace57f347241d13c3d2d8fd7b597a4f3de9ed19506a8250ec2

  • SHA512

    0bc14d7d65ac0405116b7c9d2fe8846ce5f51651dbdd150f5cb4c4df2bfdf58e9ec0477478eca5fb2c69406908bed1103b0df91c43358c311da8dd8a623906b8

  • SSDEEP

    3072:6e7WpMaxeb0CYJ97lEYNR73e+eBSW6e7WpMaxeb0CYJ97lEYNR73e+eBSW5XYXR:RqKvb0CYJ973e+eBSuqKvb0CYJ973e+1

Score
9/10
discoveryransomware

Malware Config

Targets

    • Target

      a6cd0bc9e65e58ace57f347241d13c3d2d8fd7b597a4f3de9ed19506a8250ec2N

    • Size

      179KB

    • MD5

      0e7f8494d80e71b11fa4a65f025e52f0

    • SHA1

      2666ab5b527e8fe19b4604b622803bc61e9bccdd

    • SHA256

      a6cd0bc9e65e58ace57f347241d13c3d2d8fd7b597a4f3de9ed19506a8250ec2

    • SHA512

      0bc14d7d65ac0405116b7c9d2fe8846ce5f51651dbdd150f5cb4c4df2bfdf58e9ec0477478eca5fb2c69406908bed1103b0df91c43358c311da8dd8a623906b8

    • SSDEEP

      3072:6e7WpMaxeb0CYJ97lEYNR73e+eBSW6e7WpMaxeb0CYJ97lEYNR73e+eBSW5XYXR:RqKvb0CYJ973e+eBSuqKvb0CYJ973e+1

    Score
    9/10
    discoveryransomware

    • Renames multiple (4069) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks