Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    fe016755c2dd14cdaaa8bd3004593b83be6adfcee6d58d346667b2dd0849fb6cN

  • Size

    111KB

  • Sample

    241021-a2gtfa1fjn

  • MD5

    77687488f5b98eba0e83f71a2b14e730

  • SHA1

    f5985f6d01b00abec7b352456e005d28414e94bf

  • SHA256

    fe016755c2dd14cdaaa8bd3004593b83be6adfcee6d58d346667b2dd0849fb6c

  • SHA512

    abb2c2b23d5a7b9d601355be223dbdde0a48de05402fb0a3045aa14d6aab5d50b7d213f116413ac772e20001af634fb8a50dcf665d9fbd6254d2175b242905c1

  • SSDEEP

    1536:V7Zf/FAxTWoJJ7TUoChyf7maVF5sQXThyaquChyf7maVF5sQXThyaqX7Zf/FAxT0:fny1onny1or

Malware Config

Targets

    • Target

      fe016755c2dd14cdaaa8bd3004593b83be6adfcee6d58d346667b2dd0849fb6cN

    • Size

      111KB

    • MD5

      77687488f5b98eba0e83f71a2b14e730

    • SHA1

      f5985f6d01b00abec7b352456e005d28414e94bf

    • SHA256

      fe016755c2dd14cdaaa8bd3004593b83be6adfcee6d58d346667b2dd0849fb6c

    • SHA512

      abb2c2b23d5a7b9d601355be223dbdde0a48de05402fb0a3045aa14d6aab5d50b7d213f116413ac772e20001af634fb8a50dcf665d9fbd6254d2175b242905c1

    • SSDEEP

      1536:V7Zf/FAxTWoJJ7TUoChyf7maVF5sQXThyaquChyf7maVF5sQXThyaqX7Zf/FAxT0:fny1onny1or

    • Renames multiple (4034) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks