Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

3

9d4d598751...7a.exe

windows7-x64

9

9d4d598751...7a.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9d4d598751bd582009d1a866c3cd5833415e48df4d5fcf92043ad4993488167a

  • Size

    135KB

  • Sample

    241005-bk12es1dkc

  • MD5

    cfcb82f15552c80cda99f4cfacf1c3c7

  • SHA1

    34d1e93dbc8c48f760ef4f9b9547ea2e945754b5

  • SHA256

    9d4d598751bd582009d1a866c3cd5833415e48df4d5fcf92043ad4993488167a

  • SHA512

    b9bc930451b827cfc2fc309a94c9fab92402b7eee6bacacfa9109c145ca273409e8993b63f15dda005953b2dd0f14d4aa1fac918e8d8a8f1c9a7e0e012afabda

  • SSDEEP

    1536:/7ZQpApHou595QUhUA7ZQpApHou595QUhUg:9QWp/595HuAQWp/595Hug

Score
9/10
discoveryransomware

Malware Config

Targets

    • Target

      9d4d598751bd582009d1a866c3cd5833415e48df4d5fcf92043ad4993488167a

    • Size

      135KB

    • MD5

      cfcb82f15552c80cda99f4cfacf1c3c7

    • SHA1

      34d1e93dbc8c48f760ef4f9b9547ea2e945754b5

    • SHA256

      9d4d598751bd582009d1a866c3cd5833415e48df4d5fcf92043ad4993488167a

    • SHA512

      b9bc930451b827cfc2fc309a94c9fab92402b7eee6bacacfa9109c145ca273409e8993b63f15dda005953b2dd0f14d4aa1fac918e8d8a8f1c9a7e0e012afabda

    • SSDEEP

      1536:/7ZQpApHou595QUhUA7ZQpApHou595QUhUg:9QWp/595HuAQWp/595Hug

    Score
    9/10
    discoveryransomware

    • Renames multiple (814) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks