Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    9ec9a1c74f34854a3c00e646dad6703181ec38bb749f7766537e4cf88f27fd45N

  • Size

    40KB

  • Sample

    241020-ynyf2axcjb

  • MD5

    f1ead52ebfe305d347c7d4272221d7d0

  • SHA1

    2ae56ec72ba04c5e3fed46edb186260f61e41a7b

  • SHA256

    9ec9a1c74f34854a3c00e646dad6703181ec38bb749f7766537e4cf88f27fd45

  • SHA512

    6c7f4d9bf84ea91c7d197e54124fbddf0e1fd361a7e5b3afba28bf19ea8281a48ee07447e677f192f7abade04d9638ecf24b9fb218063eeb1b239d9835b9cb12

  • SSDEEP

    768:kBT37CPKKdJJ1EXBwzEXBwdcMcI9Ro+QOViJfo+QOViJqW4C7C5:CTW7JJ7TPUnW42s

Malware Config

Targets

    • Target

      9ec9a1c74f34854a3c00e646dad6703181ec38bb749f7766537e4cf88f27fd45N

    • Size

      40KB

    • MD5

      f1ead52ebfe305d347c7d4272221d7d0

    • SHA1

      2ae56ec72ba04c5e3fed46edb186260f61e41a7b

    • SHA256

      9ec9a1c74f34854a3c00e646dad6703181ec38bb749f7766537e4cf88f27fd45

    • SHA512

      6c7f4d9bf84ea91c7d197e54124fbddf0e1fd361a7e5b3afba28bf19ea8281a48ee07447e677f192f7abade04d9638ecf24b9fb218063eeb1b239d9835b9cb12

    • SSDEEP

      768:kBT37CPKKdJJ1EXBwzEXBwdcMcI9Ro+QOViJfo+QOViJqW4C7C5:CTW7JJ7TPUnW42s

    • Renames multiple (283) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks