Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

3

e5e8d5a228...2N.exe

windows7-x64

9

e5e8d5a228...2N.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e5e8d5a2285b39e1998bf51169acb0e43023336953cdb44c1ed7812dded0eab2N

  • Size

    183KB

  • Sample

    241013-ngbctaydlp

  • MD5

    d047fd781da1c684ed3b6b8f75c23b30

  • SHA1

    a7881d605f7a2dfbbdc27a308a818e76a89e6318

  • SHA256

    e5e8d5a2285b39e1998bf51169acb0e43023336953cdb44c1ed7812dded0eab2

  • SHA512

    dcf9778c63030f4fc977430d014c0a1a05ae7bf90f9ede82169f16a8b47fa9952bcc18a52b0231c3e80db4688b37ab1116a1fe8305cb0cfe815792442b433b74

  • SSDEEP

    3072:6pWpkuK4+bE1F4c23pWpkuK4+bE1F4c2D:PCeFeQCeFeD

Score
9/10
discoveryransomware

Malware Config

Targets

    • Target

      e5e8d5a2285b39e1998bf51169acb0e43023336953cdb44c1ed7812dded0eab2N

    • Size

      183KB

    • MD5

      d047fd781da1c684ed3b6b8f75c23b30

    • SHA1

      a7881d605f7a2dfbbdc27a308a818e76a89e6318

    • SHA256

      e5e8d5a2285b39e1998bf51169acb0e43023336953cdb44c1ed7812dded0eab2

    • SHA512

      dcf9778c63030f4fc977430d014c0a1a05ae7bf90f9ede82169f16a8b47fa9952bcc18a52b0231c3e80db4688b37ab1116a1fe8305cb0cfe815792442b433b74

    • SSDEEP

      3072:6pWpkuK4+bE1F4c23pWpkuK4+bE1F4c2D:PCeFeQCeFeD

    Score
    9/10
    discoveryransomware

    • Renames multiple (3015) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks