Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2025-01-22_0306961e75d4106b430e25673ec88895_gandcrab

  • Size

    70KB

  • Sample

    250122-rqs6rszqbs

  • MD5

    0306961e75d4106b430e25673ec88895

  • SHA1

    f36c7160e31be35d7326ebbef3d7528088dfce87

  • SHA256

    35e86b499f9bc0ecb708e810a25505c842e37524cd78772db9d552b71bdfdc62

  • SHA512

    33a4db7f3c31dd6caa2aceca5964be5c7530bf5db54bad096143b57d9674ffe81c906c6f236b688b52ae586303e7248e2fd58ff0931c38d3af7479c6042b3ecc

  • SSDEEP

    1536:TZZZZZZZZZZZZpXzzzzzzzzzzzzADypczUk+lkZJngWMqqU+2bbbAV2/S2OvvdZl:Cd5BJHMqqDL2/Ovvdr

Malware Config

Targets

    • Target

      2025-01-22_0306961e75d4106b430e25673ec88895_gandcrab

    • Size

      70KB

    • MD5

      0306961e75d4106b430e25673ec88895

    • SHA1

      f36c7160e31be35d7326ebbef3d7528088dfce87

    • SHA256

      35e86b499f9bc0ecb708e810a25505c842e37524cd78772db9d552b71bdfdc62

    • SHA512

      33a4db7f3c31dd6caa2aceca5964be5c7530bf5db54bad096143b57d9674ffe81c906c6f236b688b52ae586303e7248e2fd58ff0931c38d3af7479c6042b3ecc

    • SSDEEP

      1536:TZZZZZZZZZZZZpXzzzzzzzzzzzzADypczUk+lkZJngWMqqU+2bbbAV2/S2OvvdZl:Cd5BJHMqqDL2/Ovvdr

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks