Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

5

6578b16d86...b6.exe

windows7-x64

9

6578b16d86...b6.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6578b16d8626939a87c846f585f8f6718e6e19848f70b94d69a1a74670a6a1b6

  • Size

    54KB

  • Sample

    241005-11ycxathpl

  • MD5

    479ee7515d94af8d5cb72e02f46f2b2f

  • SHA1

    be6fc444e5b2c39a5ec12e2ccff3f31c83b46129

  • SHA256

    6578b16d8626939a87c846f585f8f6718e6e19848f70b94d69a1a74670a6a1b6

  • SHA512

    a06c5fc92b67e45e95bbf26da0191d759f0921b28e566dc4add0982557d753f1496f1393f2438f00a8a5fbef7a5a748961bc8ed4c19aab51e0cd9d815457a552

  • SSDEEP

    768:V7Blpf/FAK65euBT37CPKKQSjyJJcbQbf1Oti1JGBQOOiQJhATBHfBo8o3PU+:V7Zf/FAxTWoJJZENTBHfiPU+

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      6578b16d8626939a87c846f585f8f6718e6e19848f70b94d69a1a74670a6a1b6

    • Size

      54KB

    • MD5

      479ee7515d94af8d5cb72e02f46f2b2f

    • SHA1

      be6fc444e5b2c39a5ec12e2ccff3f31c83b46129

    • SHA256

      6578b16d8626939a87c846f585f8f6718e6e19848f70b94d69a1a74670a6a1b6

    • SHA512

      a06c5fc92b67e45e95bbf26da0191d759f0921b28e566dc4add0982557d753f1496f1393f2438f00a8a5fbef7a5a748961bc8ed4c19aab51e0cd9d815457a552

    • SSDEEP

      768:V7Blpf/FAK65euBT37CPKKQSjyJJcbQbf1Oti1JGBQOOiQJhATBHfBo8o3PU+:V7Zf/FAxTWoJJZENTBHfiPU+

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (3875) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks