Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

3

a9e783d97a...eN.exe

windows7-x64

9

a9e783d97a...eN.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a9e783d97a172c71c068d4d3a318b848c2b6a32f9d9731bb647269a18f80720eN

  • Size

    169KB

  • Sample

    240919-glqjzatgqr

  • MD5

    a2e09ce953c479ed297d0a8e5bf0bb80

  • SHA1

    9c3eae1fcfa822cf43187fa569eb1fae13766e4b

  • SHA256

    a9e783d97a172c71c068d4d3a318b848c2b6a32f9d9731bb647269a18f80720e

  • SHA512

    5bab5dfeb48f72c787d0d8878afe08daf8b88b8a13f8d17a1209ee0e3a5ab530b11074b432459d31c67e5c98448222cccbd0c9b73dc9735ab1abc20ba2e74a07

  • SSDEEP

    1536:W7ZhA7dABJJ7TTQoQJTW7JJ7TTQoQ57ZhA7dABJJ7TTQoQJTW7JJ7TTQoQY:6e76BoRyoRje76BoRyoRY

Score
9/10
discoveryransomware

Malware Config

Targets

    • Target

      a9e783d97a172c71c068d4d3a318b848c2b6a32f9d9731bb647269a18f80720eN

    • Size

      169KB

    • MD5

      a2e09ce953c479ed297d0a8e5bf0bb80

    • SHA1

      9c3eae1fcfa822cf43187fa569eb1fae13766e4b

    • SHA256

      a9e783d97a172c71c068d4d3a318b848c2b6a32f9d9731bb647269a18f80720e

    • SHA512

      5bab5dfeb48f72c787d0d8878afe08daf8b88b8a13f8d17a1209ee0e3a5ab530b11074b432459d31c67e5c98448222cccbd0c9b73dc9735ab1abc20ba2e74a07

    • SSDEEP

      1536:W7ZhA7dABJJ7TTQoQJTW7JJ7TTQoQ57ZhA7dABJJ7TTQoQJTW7JJ7TTQoQY:6e76BoRyoRje76BoRyoRY

    Score
    9/10
    discoveryransomware

    • Renames multiple (4208) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks