Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    6950a88f09ca095959ae81170c6ecd2023be00f9740b9b3797cba183f8a3a338

  • Size

    53KB

  • Sample

    241012-2rm19azdpn

  • MD5

    173c0843f74b0edeb2d572a16912aefd

  • SHA1

    268973f8a5d69a8a67960589d83e489c2ad4242a

  • SHA256

    6950a88f09ca095959ae81170c6ecd2023be00f9740b9b3797cba183f8a3a338

  • SHA512

    fae1149406eec76c636f43b39f709b3da7690e1c873376701bf2b9540b760a3698b014e60cf928a6a4de7d2991c31be7b0e8c39d10f4288a8f6cde3b1355247e

  • SSDEEP

    768:kBT37CPKKdJJ1EXBwzEXBwdcMcI9Y91BT37CPKKdJJ1EXBwzEXBwdcMcI9Y9O:CTW7JJ7TiTW7JJ7TH

Malware Config

Targets

    • Target

      6950a88f09ca095959ae81170c6ecd2023be00f9740b9b3797cba183f8a3a338

    • Size

      53KB

    • MD5

      173c0843f74b0edeb2d572a16912aefd

    • SHA1

      268973f8a5d69a8a67960589d83e489c2ad4242a

    • SHA256

      6950a88f09ca095959ae81170c6ecd2023be00f9740b9b3797cba183f8a3a338

    • SHA512

      fae1149406eec76c636f43b39f709b3da7690e1c873376701bf2b9540b760a3698b014e60cf928a6a4de7d2991c31be7b0e8c39d10f4288a8f6cde3b1355247e

    • SSDEEP

      768:kBT37CPKKdJJ1EXBwzEXBwdcMcI9Y91BT37CPKKdJJ1EXBwzEXBwdcMcI9Y9O:CTW7JJ7TiTW7JJ7TH

    • Renames multiple (4057) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks