Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

6477433c0c...20.exe

windows7-x64

10

6477433c0c...20.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6477433c0c61838a902e017af748d433804f38f172a3faf58f34614ebd9fa320

  • Size

    79KB

  • Sample

    250313-bf4lra1jv2

  • MD5

    4bf9e7625f84f5c41a856cb7555c3815

  • SHA1

    8e0d981bde9ed16ee061cacf4dfb109004bc1e3f

  • SHA256

    6477433c0c61838a902e017af748d433804f38f172a3faf58f34614ebd9fa320

  • SHA512

    e8da30b6fc376c9aee56df63438daa100b493214557a467659bc284c87f583e2f4e63f2a712136d3584da1b69dec0f536fe60ce5cbe6f93b55dced2978d57f69

  • SSDEEP

    1536:KbqvMih8xubbsrQLOJgY8ZZP8LHD4XWaNH71dLdG1iiFM2iG2nHQ:tvMiyubsrQLOJgY8Zp8LHD4XWaNH71dr

Score
10/10
babukdefense_evasiondiscoveryexecutionimpactransomware

Malware Config

Targets

    • Target

      6477433c0c61838a902e017af748d433804f38f172a3faf58f34614ebd9fa320

    • Size

      79KB

    • MD5

      4bf9e7625f84f5c41a856cb7555c3815

    • SHA1

      8e0d981bde9ed16ee061cacf4dfb109004bc1e3f

    • SHA256

      6477433c0c61838a902e017af748d433804f38f172a3faf58f34614ebd9fa320

    • SHA512

      e8da30b6fc376c9aee56df63438daa100b493214557a467659bc284c87f583e2f4e63f2a712136d3584da1b69dec0f536fe60ce5cbe6f93b55dced2978d57f69

    • SSDEEP

      1536:KbqvMih8xubbsrQLOJgY8ZZP8LHD4XWaNH71dLdG1iiFM2iG2nHQ:tvMiyubsrQLOJgY8Zp8LHD4XWaNH71dr

    Score
    10/10
    babukdefense_evasiondiscoveryexecutionimpactransomware

    • Babuk Locker

      RaaS first seen in 2021 initially called Vasa Locker.

      ransomwarebabuk

    • Babuk family

      babuk

    • Deletes shadow copies

      Ransomware often targets backup files to inhibit system recovery.

      ransomwaredefense_evasionimpactexecution

    • Renames multiple (131) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks