Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    524734420ceb8186a9cc48738b88b4f1af3507c7b1c2b3b1e994136903e14e1cN

  • Size

    67KB

  • Sample

    241016-cep8eaxbqe

  • MD5

    286ee12a55013860898c927beffaa350

  • SHA1

    bf9a47594db71650fa48110b94280fe98c4bbb79

  • SHA256

    524734420ceb8186a9cc48738b88b4f1af3507c7b1c2b3b1e994136903e14e1c

  • SHA512

    c1d6a40363cbb1e53cc69263d0044f9433619cd3ec70fdcd723e4f56e8aa876bd41a274b7ce673bd45b8c48c06cf176ef5cdebeae9dabcacc6e6c280dc076b3f

  • SSDEEP

    768:kBT37CPKKIm0CAbLg++PJHJzIWD+dVdCYgck5sIZFlzc3/Sg2aDM9uA9DM9uAFzZ:CTWn1++PJHJXA/OsIZfzc3/Q8zxY5q

Malware Config

Targets

    • Target

      524734420ceb8186a9cc48738b88b4f1af3507c7b1c2b3b1e994136903e14e1cN

    • Size

      67KB

    • MD5

      286ee12a55013860898c927beffaa350

    • SHA1

      bf9a47594db71650fa48110b94280fe98c4bbb79

    • SHA256

      524734420ceb8186a9cc48738b88b4f1af3507c7b1c2b3b1e994136903e14e1c

    • SHA512

      c1d6a40363cbb1e53cc69263d0044f9433619cd3ec70fdcd723e4f56e8aa876bd41a274b7ce673bd45b8c48c06cf176ef5cdebeae9dabcacc6e6c280dc076b3f

    • SSDEEP

      768:kBT37CPKKIm0CAbLg++PJHJzIWD+dVdCYgck5sIZFlzc3/Sg2aDM9uA9DM9uAFzZ:CTWn1++PJHJXA/OsIZfzc3/Q8zxY5q

    • Renames multiple (3295) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks