Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
e751e3b86489f2aa7909bfac886abc95e7e5f1d07a93dca398f8893d9bd8d80a
-
Size
294KB
-
Sample
241130-fsh8ssylcq
-
MD5
42188d642314b226c2f2e339f3c7bc3b
-
SHA1
d565ccdef3e0a7d4afb7ecf70701ae7be0fd92dc
-
SHA256
e751e3b86489f2aa7909bfac886abc95e7e5f1d07a93dca398f8893d9bd8d80a
-
SHA512
8b85523e1255ba46d8b77b31c0c6020b584051200d817e5401b3e8336553a62d5d8d938ab288437fdce1418ab71ec75c0564bd9a48e0f02dc5cf48cb7997ad73
-
SSDEEP
6144:fEJIjNDv0bNXkbvLxEJIjNDv0bNXkbvLz:+IZGNXkbvLIIZGNXkbvLz
Behavioral task
behavioral1
Sample
e751e3b86489f2aa7909bfac886abc95e7e5f1d07a93dca398f8893d9bd8d80a.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e751e3b86489f2aa7909bfac886abc95e7e5f1d07a93dca398f8893d9bd8d80a.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
e751e3b86489f2aa7909bfac886abc95e7e5f1d07a93dca398f8893d9bd8d80a
-
Size
294KB
-
MD5
42188d642314b226c2f2e339f3c7bc3b
-
SHA1
d565ccdef3e0a7d4afb7ecf70701ae7be0fd92dc
-
SHA256
e751e3b86489f2aa7909bfac886abc95e7e5f1d07a93dca398f8893d9bd8d80a
-
SHA512
8b85523e1255ba46d8b77b31c0c6020b584051200d817e5401b3e8336553a62d5d8d938ab288437fdce1418ab71ec75c0564bd9a48e0f02dc5cf48cb7997ad73
-
SSDEEP
6144:fEJIjNDv0bNXkbvLxEJIjNDv0bNXkbvLz:+IZGNXkbvLIIZGNXkbvLz
Score9/10-
Renames multiple (3244) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-