Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2de56d1470e1869d5e49c15207da3bbea64e20d93ade0074a475c93eade7d5fdN

  • Size

    36KB

  • Sample

    241016-gnpepawclc

  • MD5

    5003fd2f0163131f46d985db4efdaea0

  • SHA1

    bf6dd73222b6ffd2520ec8aee96f9aa183d08cd5

  • SHA256

    2de56d1470e1869d5e49c15207da3bbea64e20d93ade0074a475c93eade7d5fd

  • SHA512

    6fc77cc4c242e056180436f31f08761007c3dc5fb1f246f21604b4ad05ca0b9f7a74694f98c658c1d5882fa558d748212f313afa52cbc12f6d194ca2069e2ed2

  • SSDEEP

    768:kBT37CPKKdJJcbQbf1Oti1JGBQOOiQJhATBHfBo8o3Pp:CTW7JJZENTBHfiPp

Malware Config

Targets

    • Target

      2de56d1470e1869d5e49c15207da3bbea64e20d93ade0074a475c93eade7d5fdN

    • Size

      36KB

    • MD5

      5003fd2f0163131f46d985db4efdaea0

    • SHA1

      bf6dd73222b6ffd2520ec8aee96f9aa183d08cd5

    • SHA256

      2de56d1470e1869d5e49c15207da3bbea64e20d93ade0074a475c93eade7d5fd

    • SHA512

      6fc77cc4c242e056180436f31f08761007c3dc5fb1f246f21604b4ad05ca0b9f7a74694f98c658c1d5882fa558d748212f313afa52cbc12f6d194ca2069e2ed2

    • SSDEEP

      768:kBT37CPKKdJJcbQbf1Oti1JGBQOOiQJhATBHfBo8o3Pp:CTW7JJZENTBHfiPp

    • Renames multiple (3275) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks