Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

5

b157a55c06...2f.exe

windows7-x64

9

b157a55c06...2f.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b157a55c06711c5875181566a06b728049af4a4ac10454e77d4d251a66a2a82f

  • Size

    124KB

  • Sample

    241012-b6fydawbrg

  • MD5

    0b146056345e54ab504490e4a07fda38

  • SHA1

    d967fe72a144c54e2edc3e888aa0f6bd180ff412

  • SHA256

    b157a55c06711c5875181566a06b728049af4a4ac10454e77d4d251a66a2a82f

  • SHA512

    6ea3942b52d231df3aaf64ed5f495d9a3e5bc87782e822aa604c24e054ce4af0edefccec694237db7df5bd828a8349386100f203b739db07a4b6e81bdb48cb9f

  • SSDEEP

    1536:V7Zf/FAxTWtnMdyGdy4AnAJYq8YqiXjTWUnMdyGdy4AnAJYq8YqiXz+Q:fnyGnpAeklXRnpAeklXn

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      b157a55c06711c5875181566a06b728049af4a4ac10454e77d4d251a66a2a82f

    • Size

      124KB

    • MD5

      0b146056345e54ab504490e4a07fda38

    • SHA1

      d967fe72a144c54e2edc3e888aa0f6bd180ff412

    • SHA256

      b157a55c06711c5875181566a06b728049af4a4ac10454e77d4d251a66a2a82f

    • SHA512

      6ea3942b52d231df3aaf64ed5f495d9a3e5bc87782e822aa604c24e054ce4af0edefccec694237db7df5bd828a8349386100f203b739db07a4b6e81bdb48cb9f

    • SSDEEP

      1536:V7Zf/FAxTWtnMdyGdy4AnAJYq8YqiXjTWUnMdyGdy4AnAJYq8YqiXz+Q:fnyGnpAeklXRnpAeklXn

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (3449) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks