Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

3

sup.logica...om.exe

windows7-x64

9

sup.logica...om.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    [email protected]

  • Size

    330KB

  • Sample

    241025-hzc2gawerf

  • MD5

    8c26c5bb599b606cc549ceef0d9d2da3

  • SHA1

    86a373936df7e753f7284efc63bf8970e9a56870

  • SHA256

    acc791703bc6e6ec9dcad7ef28ea5bcd1cf70f0a17412b28078daa66df5989d8

  • SHA512

    f05012ab52e2e88f0342d0a9fc52be210cdb4895035c4854592f350e24ddbcf48a710c25285c73a0462d51fe937540d491f5ce376e226558398cc1eb7bab2873

  • SSDEEP

    6144:ypBFADu1hgO8uoHKm9bDSN23GqcgCC/5t:sM6TgO1oHbHSN2334O

Score
9/10
ransomwarespywarestealer

Malware Config

Targets

    • Target

      [email protected]

    • Size

      330KB

    • MD5

      8c26c5bb599b606cc549ceef0d9d2da3

    • SHA1

      86a373936df7e753f7284efc63bf8970e9a56870

    • SHA256

      acc791703bc6e6ec9dcad7ef28ea5bcd1cf70f0a17412b28078daa66df5989d8

    • SHA512

      f05012ab52e2e88f0342d0a9fc52be210cdb4895035c4854592f350e24ddbcf48a710c25285c73a0462d51fe937540d491f5ce376e226558398cc1eb7bab2873

    • SSDEEP

      6144:ypBFADu1hgO8uoHKm9bDSN23GqcgCC/5t:sM6TgO1oHbHSN2334O

    Score
    9/10
    ransomwarespywarestealer

    • Renames multiple (7752) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks