Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    886b80245ef359c15d1f6eafe46b849d82bb384c640c63d217dca36e9e8997acN

  • Size

    137KB

  • Sample

    241016-c12tbssfjn

  • MD5

    cba1c8bc39d1475d72872189bdd0e6d0

  • SHA1

    86f3327ca115fbf60d88cb6634a4a740aeefcc53

  • SHA256

    886b80245ef359c15d1f6eafe46b849d82bb384c640c63d217dca36e9e8997ac

  • SHA512

    942d93a5de2be17a811d546835f2fec26f9828edbc509a96b7d88ccd0fbb81296d6a302335e745a2f238a2400c1f8945d476cac68240a22c438130b614c8ad9f

  • SSDEEP

    1536:CTWn1++PJHJXA/OsIZfzc3/Q8zxY59TWn1++PJHJXA/OsIZfzc3/Q8zxY5h9s:KQSox55QSox5h9s

Malware Config

Targets

    • Target

      886b80245ef359c15d1f6eafe46b849d82bb384c640c63d217dca36e9e8997acN

    • Size

      137KB

    • MD5

      cba1c8bc39d1475d72872189bdd0e6d0

    • SHA1

      86f3327ca115fbf60d88cb6634a4a740aeefcc53

    • SHA256

      886b80245ef359c15d1f6eafe46b849d82bb384c640c63d217dca36e9e8997ac

    • SHA512

      942d93a5de2be17a811d546835f2fec26f9828edbc509a96b7d88ccd0fbb81296d6a302335e745a2f238a2400c1f8945d476cac68240a22c438130b614c8ad9f

    • SSDEEP

      1536:CTWn1++PJHJXA/OsIZfzc3/Q8zxY59TWn1++PJHJXA/OsIZfzc3/Q8zxY5h9s:KQSox55QSox5h9s

    • Renames multiple (3858) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks