Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
6950a88f09ca095959ae81170c6ecd2023be00f9740b9b3797cba183f8a3a338
-
Size
53KB
-
Sample
241012-2rm19azdpn
-
MD5
173c0843f74b0edeb2d572a16912aefd
-
SHA1
268973f8a5d69a8a67960589d83e489c2ad4242a
-
SHA256
6950a88f09ca095959ae81170c6ecd2023be00f9740b9b3797cba183f8a3a338
-
SHA512
fae1149406eec76c636f43b39f709b3da7690e1c873376701bf2b9540b760a3698b014e60cf928a6a4de7d2991c31be7b0e8c39d10f4288a8f6cde3b1355247e
-
SSDEEP
768:kBT37CPKKdJJ1EXBwzEXBwdcMcI9Y91BT37CPKKdJJ1EXBwzEXBwdcMcI9Y9O:CTW7JJ7TiTW7JJ7TH
Behavioral task
behavioral1
Sample
6950a88f09ca095959ae81170c6ecd2023be00f9740b9b3797cba183f8a3a338.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
6950a88f09ca095959ae81170c6ecd2023be00f9740b9b3797cba183f8a3a338.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
6950a88f09ca095959ae81170c6ecd2023be00f9740b9b3797cba183f8a3a338
-
Size
53KB
-
MD5
173c0843f74b0edeb2d572a16912aefd
-
SHA1
268973f8a5d69a8a67960589d83e489c2ad4242a
-
SHA256
6950a88f09ca095959ae81170c6ecd2023be00f9740b9b3797cba183f8a3a338
-
SHA512
fae1149406eec76c636f43b39f709b3da7690e1c873376701bf2b9540b760a3698b014e60cf928a6a4de7d2991c31be7b0e8c39d10f4288a8f6cde3b1355247e
-
SSDEEP
768:kBT37CPKKdJJ1EXBwzEXBwdcMcI9Y91BT37CPKKdJJ1EXBwzEXBwdcMcI9Y9O:CTW7JJ7TiTW7JJ7TH
Score9/10-
Renames multiple (4057) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-