Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

ff78e97068...66.exe

windows7-x64

10

ff78e97068...66.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ff78e9706891818a3db5ef3f46f107250f59bff43276d72e77eb4ec9d26e0e66.zip

  • Size

    26KB

  • Sample

    250225-r967qs1nv6

  • MD5

    5947955bd1858b7ee9c7ad78ce97051f

  • SHA1

    c2f5d87aea2688973483e892dad0c2967ecc34a3

  • SHA256

    4abedc057389bdb9b4fded968db7ab78f9d2709fdd2ad14ba1d2947d5d62797e

  • SHA512

    77f04c712b755845f68ffdd39290fa432e7091ecaecb41951e971a77cf350ba54c396b514c01841e3e29f0f2b23465acd14861f27fc9c755fdadac891d85060e

  • SSDEEP

    384:MKQ96zSfvujHokZ6kgXH+L4Iw7T2dzHH+7RIbscw5rVH+dYNFrQNpfb9WofEsj:MKQ9JvJkErq4I/dje73RYQFrQNpz9Woz

Score
10/10
babukdefense_evasiondiscoveryexecutionimpactransomware

Malware Config

Targets

    • Target

      ff78e9706891818a3db5ef3f46f107250f59bff43276d72e77eb4ec9d26e0e66.exe

    • Size

      79KB

    • MD5

      dde253fbf823011af1961649e16e218c

    • SHA1

      a725eac8b1e7487078dd79bac03b635fb658a511

    • SHA256

      ff78e9706891818a3db5ef3f46f107250f59bff43276d72e77eb4ec9d26e0e66

    • SHA512

      27f50866d9bd67b5859d0d7589a996b0ef0d131dea54b62d4e34c71200751739cba64257fe4cdc15ca86f52e3e017172b95b3290a1b6b76cb38c7ee46e5f9b77

    • SSDEEP

      1536:UmkWBeG/vEbmsrQLOJgY8ZZP8LHD4XWaNH71dLdG1iiFM2iG2nsf:HBeQsmsrQLOJgY8Zp8LHD4XWaNH71dLc

    Score
    10/10
    babukdefense_evasiondiscoveryexecutionimpactransomware

    • Babuk Locker

      RaaS first seen in 2021 initially called Vasa Locker.

      ransomwarebabuk

    • Babuk family

      babuk

    • Deletes shadow copies

      Ransomware often targets backup files to inhibit system recovery.

      ransomwaredefense_evasionimpactexecution

    • Renames multiple (204) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks