Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

3

121074f364...a8.exe

windows7-x64

9

121074f364...a8.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    121074f36458ca754d0a754462292ad35c6e67eb87d0dc547bf4439ba74270a8

  • Size

    172KB

  • Sample

    240919-w7b12atglp

  • MD5

    9f92fc012080f34dabe0950f6447876b

  • SHA1

    c40e08151994ed94804c93c7f5674a275f6a9ccc

  • SHA256

    121074f36458ca754d0a754462292ad35c6e67eb87d0dc547bf4439ba74270a8

  • SHA512

    0bfce8fa5548cbb7b6a4da75082ad667a39097b5b26a0e4b05106e50f7e7443aa9500133f5f96d8062783513283c309119544d3ba68aa2a87f9a6472b2deeb0a

  • SSDEEP

    3072:9QWpze+eJfFpsJOfFpsJ5D7WWQWpze+eJfFpsJOfFpsJ5D7Wr9Y9G:Lpe+ewDvpe+ewDM

Score
9/10
discoveryransomware

Malware Config

Targets

    • Target

      121074f36458ca754d0a754462292ad35c6e67eb87d0dc547bf4439ba74270a8

    • Size

      172KB

    • MD5

      9f92fc012080f34dabe0950f6447876b

    • SHA1

      c40e08151994ed94804c93c7f5674a275f6a9ccc

    • SHA256

      121074f36458ca754d0a754462292ad35c6e67eb87d0dc547bf4439ba74270a8

    • SHA512

      0bfce8fa5548cbb7b6a4da75082ad667a39097b5b26a0e4b05106e50f7e7443aa9500133f5f96d8062783513283c309119544d3ba68aa2a87f9a6472b2deeb0a

    • SSDEEP

      3072:9QWpze+eJfFpsJOfFpsJ5D7WWQWpze+eJfFpsJOfFpsJ5D7Wr9Y9G:Lpe+ewDvpe+ewDM

    Score
    9/10
    discoveryransomware

    • Renames multiple (4470) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks