Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

1

Urgent Con...df.exe

windows7-x64

10

Urgent Con...df.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Urgent Contract Action.pdf.exe.zip

  • Size

    395KB

  • Sample

    250308-zkvfmsslv4

  • MD5

    38149ac8bf583d323c968aa8c1b59d12

  • SHA1

    94d6eb12f139bdbb4866bf39ea26fbb3888201df

  • SHA256

    b94504a8c2121d0d9dc5058b6e60b5a83dec1467754085ece4d098304698b04b

  • SHA512

    5af0128ae3b2d2175e657291663436a68300bdf4ccaa0529572796dba60fe10308d4bf4eca35c5f932b529032af21c600585a1f81053e7541d78aec36b758b45

  • SSDEEP

    6144:EL1roFNhGEFZkEeGx9wMo8hVGNLgmi8Q6QYuFQsA+t31BQxudiFqVd1Ja4:iro/wEFaErpDONLJcrcsB1BQ0Vd1J7

Score
10/10
badrabbitmimikatzdiscoveryransomware

Malware Config

Targets

    • Target

      Urgent Contract Action.pdf.exe.bin

    • Size

      431KB

    • MD5

      fbbdc39af1139aebba4da004475e8839

    • SHA1

      de5c8d858e6e41da715dca1c019df0bfb92d32c0

    • SHA256

      630325cac09ac3fab908f903e3b00d0dadd5fdaa0875ed8496fcbb97a558d0da

    • SHA512

      74eca8c01de215b33d5ceea1fda3f3bef96b513f58a750dba04b0de36f7ef4f7846a6431d52879ca0d8641bfd504d4721a9a96fa2e18c6888fd67fa77686af87

    • SSDEEP

      12288:BHNTywFAvN86pLbqWRKHZKfErrZJyZ0yqsGO3XR63:vT56NbqWRwZaEr3yt2O3XR63

    Score
    10/10
    badrabbitmimikatzdiscoveryransomware

    • BadRabbit

      Ransomware family discovered in late 2017, mainly targeting Russia and Ukraine.

      ransomwarebadrabbit

    • Badrabbit family

      badrabbit

    • Mimikatz

      mimikatz is an open source tool to dump credentials on Windows.

      mimikatz

    • Mimikatz family

      mimikatz

    • mimikatz is an open source tool to dump credentials on Windows

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks