Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    16daa6fa6f624d3f4acec3b9438ade2ebda25b0a8f888f4ae5edd9cc9f72c216

  • Size

    53KB

  • Sample

    220608-22cm9sdgdl

  • MD5

    c680e3001c7e967082a7430cc4fc7467

  • SHA1

    e808bc854c18fb89055d5b06130c56bbf53ed9b1

  • SHA256

    16daa6fa6f624d3f4acec3b9438ade2ebda25b0a8f888f4ae5edd9cc9f72c216

  • SHA512

    3ee798d9e283cb4ad26aeb69178bd3ca236af40a84566e1cfc6f4257a3b57040187256dfc66f8f93cfb9125644a899b8565ba2bbde702c9a01ac0f0669aa3abd

Malware Config

Targets

    • Target

      16daa6fa6f624d3f4acec3b9438ade2ebda25b0a8f888f4ae5edd9cc9f72c216

    • Size

      53KB

    • MD5

      c680e3001c7e967082a7430cc4fc7467

    • SHA1

      e808bc854c18fb89055d5b06130c56bbf53ed9b1

    • SHA256

      16daa6fa6f624d3f4acec3b9438ade2ebda25b0a8f888f4ae5edd9cc9f72c216

    • SHA512

      3ee798d9e283cb4ad26aeb69178bd3ca236af40a84566e1cfc6f4257a3b57040187256dfc66f8f93cfb9125644a899b8565ba2bbde702c9a01ac0f0669aa3abd

    Score
    9/10
    • Contacts a large (35996) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Reads runtime system information

      Reads data from /proc virtual filesystem.

MITRE ATT&CK Enterprise v6

Tasks