Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    a75afc86fc77e12166dccac6d9837c69a4b7e045bff30dbabed1944d135b41c0N

  • Size

    80KB

  • Sample

    241002-bmw59azdjk

  • MD5

    bd05576fe2c645585fdfd31a3061d000

  • SHA1

    d82ab72cc2d52e47d7c0255929163085329fa8c1

  • SHA256

    a75afc86fc77e12166dccac6d9837c69a4b7e045bff30dbabed1944d135b41c0

  • SHA512

    f02ad07f4112fd4bebaf5a629f8b63dcc980fe3b8ae2bb01ce896f3ddf89d6139fc799f1e9b854f2a669c0fa506aea926f8d01d17a568c7a9122b2ae4b97ad1c

  • SSDEEP

    1536:W7ZppApBMyKoIWbsHfySkT5GeCyi348oWGRPOzkjId6q8UdrSD+kCoIfL2YwqAFt:6pWpBMyKoIWbsHfySkT5GeCyi348oWGz

Score
9/10

Malware Config

Targets

    • Target

      a75afc86fc77e12166dccac6d9837c69a4b7e045bff30dbabed1944d135b41c0N

    • Size

      80KB

    • MD5

      bd05576fe2c645585fdfd31a3061d000

    • SHA1

      d82ab72cc2d52e47d7c0255929163085329fa8c1

    • SHA256

      a75afc86fc77e12166dccac6d9837c69a4b7e045bff30dbabed1944d135b41c0

    • SHA512

      f02ad07f4112fd4bebaf5a629f8b63dcc980fe3b8ae2bb01ce896f3ddf89d6139fc799f1e9b854f2a669c0fa506aea926f8d01d17a568c7a9122b2ae4b97ad1c

    • SSDEEP

      1536:W7ZppApBMyKoIWbsHfySkT5GeCyi348oWGRPOzkjId6q8UdrSD+kCoIfL2YwqAFt:6pWpBMyKoIWbsHfySkT5GeCyi348oWGz

    Score
    9/10
    • Renames multiple (6189) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks