Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

3

9eeb385f63...3N.exe

windows7-x64

9

9eeb385f63...3N.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9eeb385f6387c35689ba32cef1de9dd364a443cd3e27e6f6f8dca47277607353N

  • Size

    115KB

  • Sample

    240919-w8wf3atejb

  • MD5

    4c80d9f0d8ab2b0657ceb71a4175ff80

  • SHA1

    464e85337227a987755f30cd5177eb41121e0d2f

  • SHA256

    9eeb385f6387c35689ba32cef1de9dd364a443cd3e27e6f6f8dca47277607353

  • SHA512

    a95b08ef011966ac9398fea21e65d061dc68748c80c6a6cb8e7c6da1268b0f3a451e68e56e6189b59cfe33cd9ba8a8054b6ca9710e66992f580e3fe90f6c0498

  • SSDEEP

    1536:W7ZppApaJofJo8YvJtLJt87ZppApaJofJo8YvJtLJtP:6pWpFpWp2

Score
9/10
discoveryransomware

Malware Config

Targets

    • Target

      9eeb385f6387c35689ba32cef1de9dd364a443cd3e27e6f6f8dca47277607353N

    • Size

      115KB

    • MD5

      4c80d9f0d8ab2b0657ceb71a4175ff80

    • SHA1

      464e85337227a987755f30cd5177eb41121e0d2f

    • SHA256

      9eeb385f6387c35689ba32cef1de9dd364a443cd3e27e6f6f8dca47277607353

    • SHA512

      a95b08ef011966ac9398fea21e65d061dc68748c80c6a6cb8e7c6da1268b0f3a451e68e56e6189b59cfe33cd9ba8a8054b6ca9710e66992f580e3fe90f6c0498

    • SSDEEP

      1536:W7ZppApaJofJo8YvJtLJt87ZppApaJofJo8YvJtLJtP:6pWpFpWp2

    Score
    9/10
    discoveryransomware

    • Renames multiple (3828) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks