Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2025-01-17_de80ebba490ae4e730e2753bad0fde1d_gandcrab

  • Size

    70KB

  • Sample

    250117-qvxt3szrbn

  • MD5

    de80ebba490ae4e730e2753bad0fde1d

  • SHA1

    9453549725679a0739f11653fc09b059264d1b50

  • SHA256

    91369f1b46871bbe01d9ba923f8efbb80854c5bd935330c449c49bc30018cea4

  • SHA512

    4980b440dfe34c0e33b66fcb91b58b686317e398907280953d13302e10098c46051f9ec7ef9d54da1e7b33668b0f17559029cb12b1276aa0eb4ee21552277435

  • SSDEEP

    1536:qZZZZZZZZZZZZpXzzzzzzzzzzzzADypczUk+lkZJngWMqqU+2bbbAV2/S2OvvdZl:Bd5BJHMqqDL2/Ovvdr

Malware Config

Targets

    • Target

      2025-01-17_de80ebba490ae4e730e2753bad0fde1d_gandcrab

    • Size

      70KB

    • MD5

      de80ebba490ae4e730e2753bad0fde1d

    • SHA1

      9453549725679a0739f11653fc09b059264d1b50

    • SHA256

      91369f1b46871bbe01d9ba923f8efbb80854c5bd935330c449c49bc30018cea4

    • SHA512

      4980b440dfe34c0e33b66fcb91b58b686317e398907280953d13302e10098c46051f9ec7ef9d54da1e7b33668b0f17559029cb12b1276aa0eb4ee21552277435

    • SSDEEP

      1536:qZZZZZZZZZZZZpXzzzzzzzzzzzzADypczUk+lkZJngWMqqU+2bbbAV2/S2OvvdZl:Bd5BJHMqqDL2/Ovvdr

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks