Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

5

e751e3b864...0a.exe

windows7-x64

9

e751e3b864...0a.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e751e3b86489f2aa7909bfac886abc95e7e5f1d07a93dca398f8893d9bd8d80a

  • Size

    294KB

  • Sample

    241130-fsh8ssylcq

  • MD5

    42188d642314b226c2f2e339f3c7bc3b

  • SHA1

    d565ccdef3e0a7d4afb7ecf70701ae7be0fd92dc

  • SHA256

    e751e3b86489f2aa7909bfac886abc95e7e5f1d07a93dca398f8893d9bd8d80a

  • SHA512

    8b85523e1255ba46d8b77b31c0c6020b584051200d817e5401b3e8336553a62d5d8d938ab288437fdce1418ab71ec75c0564bd9a48e0f02dc5cf48cb7997ad73

  • SSDEEP

    6144:fEJIjNDv0bNXkbvLxEJIjNDv0bNXkbvLz:+IZGNXkbvLIIZGNXkbvLz

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      e751e3b86489f2aa7909bfac886abc95e7e5f1d07a93dca398f8893d9bd8d80a

    • Size

      294KB

    • MD5

      42188d642314b226c2f2e339f3c7bc3b

    • SHA1

      d565ccdef3e0a7d4afb7ecf70701ae7be0fd92dc

    • SHA256

      e751e3b86489f2aa7909bfac886abc95e7e5f1d07a93dca398f8893d9bd8d80a

    • SHA512

      8b85523e1255ba46d8b77b31c0c6020b584051200d817e5401b3e8336553a62d5d8d938ab288437fdce1418ab71ec75c0564bd9a48e0f02dc5cf48cb7997ad73

    • SSDEEP

      6144:fEJIjNDv0bNXkbvLxEJIjNDv0bNXkbvLz:+IZGNXkbvLIIZGNXkbvLz

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (3244) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks