Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    a587083ef2c6169e87ba73e9e51f1e78d020b5924e4419fe0ab9527e298562e1

  • Size

    127KB

  • Sample

    220624-2arccahgh5

  • MD5

    8a804570ec5719b5fe18a0948ea4d915

  • SHA1

    c7da0b4134d8ca1baa2d6a77042c3a1ef9aa0f43

  • SHA256

    a587083ef2c6169e87ba73e9e51f1e78d020b5924e4419fe0ab9527e298562e1

  • SHA512

    e9372a5aacc3fee692d954f61492b1bb217d8398af30d63df9451e1420be8e1b717ad01530a113c9c2c12d4e09acebbda81183169c82e25ea7d1c3237910b608

Malware Config

Targets

    • Target

      a587083ef2c6169e87ba73e9e51f1e78d020b5924e4419fe0ab9527e298562e1

    • Size

      127KB

    • MD5

      8a804570ec5719b5fe18a0948ea4d915

    • SHA1

      c7da0b4134d8ca1baa2d6a77042c3a1ef9aa0f43

    • SHA256

      a587083ef2c6169e87ba73e9e51f1e78d020b5924e4419fe0ab9527e298562e1

    • SHA512

      e9372a5aacc3fee692d954f61492b1bb217d8398af30d63df9451e1420be8e1b717ad01530a113c9c2c12d4e09acebbda81183169c82e25ea7d1c3237910b608

    Score
    9/10
    • Contacts a large (35490) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Reads runtime system information

      Reads data from /proc virtual filesystem.

MITRE ATT&CK Enterprise v6

Tasks