Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    36a91b06bbfb7b6339e9a77f9ff281ba06d2dacbb3b74292b139ab5a4e367c88N

  • Size

    101KB

  • Sample

    241016-cly4ws1hlq

  • MD5

    c4075505dbd46fd11b0a978ddcd13600

  • SHA1

    504678fc947addecfba4ff05b29db5927c3df06a

  • SHA256

    36a91b06bbfb7b6339e9a77f9ff281ba06d2dacbb3b74292b139ab5a4e367c88

  • SHA512

    2fbafd0a9119c21e047e7e7d4bc411d0217424b601d1463d3a0dbb96328050cb7af345076f77667324ea0be5ea2771a6aa9e47734d1b81709a7d08b6dc263364

  • SSDEEP

    768:V7Blpf/FAK65euBT37CPKKQSjyJJ1EXBwzEXBwdcMcI9Ro+QOViJfo+QOViJqWMj:V7Zf/FAxTWoJJ7TPUnWKTW7JJ7TPUnWs

Malware Config

Targets

    • Target

      36a91b06bbfb7b6339e9a77f9ff281ba06d2dacbb3b74292b139ab5a4e367c88N

    • Size

      101KB

    • MD5

      c4075505dbd46fd11b0a978ddcd13600

    • SHA1

      504678fc947addecfba4ff05b29db5927c3df06a

    • SHA256

      36a91b06bbfb7b6339e9a77f9ff281ba06d2dacbb3b74292b139ab5a4e367c88

    • SHA512

      2fbafd0a9119c21e047e7e7d4bc411d0217424b601d1463d3a0dbb96328050cb7af345076f77667324ea0be5ea2771a6aa9e47734d1b81709a7d08b6dc263364

    • SSDEEP

      768:V7Blpf/FAK65euBT37CPKKQSjyJJ1EXBwzEXBwdcMcI9Ro+QOViJfo+QOViJqWMj:V7Zf/FAxTWoJJ7TPUnWKTW7JJ7TPUnWs

    • Renames multiple (3461) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks