Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

07/03/2025, 11:40

250307-ns449szp17 10

07/03/2025, 11:36

250307-nqnphazpx9 8

General

  • Target

    test.js

  • Size

    32B

  • Sample

    250307-ns449szp17

  • MD5

    c1d823b1ffe895f3649866762ab72a9c

  • SHA1

    3364ff687f85ac9abf338334a2824de6e1b6adf2

  • SHA256

    11cd2cbf2f7c8b3a02402aed347152e817bcaeb219485956f70fe419e34d751b

  • SHA512

    ec2d3dcc3a29ead8c445e2627b35ebb99fefa49946a25c5431604be3524713ab1c254b237ea59495722b29455d504b7b8ec1c7f80b8106a95c478c178e4bf557

Malware Config

Targets

    • Target

      test.js

    • Size

      32B

    • MD5

      c1d823b1ffe895f3649866762ab72a9c

    • SHA1

      3364ff687f85ac9abf338334a2824de6e1b6adf2

    • SHA256

      11cd2cbf2f7c8b3a02402aed347152e817bcaeb219485956f70fe419e34d751b

    • SHA512

      ec2d3dcc3a29ead8c445e2627b35ebb99fefa49946a25c5431604be3524713ab1c254b237ea59495722b29455d504b7b8ec1c7f80b8106a95c478c178e4bf557

    • CryptoLocker

      Ransomware family with multiple variants.

    • Cryptolocker family

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Adds Run key to start application

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks