Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    e0375f4024f08ad2fd6e451a4ba6f70f29bdf1d1a3767e92fd325cbde1b28dde

  • Size

    3.6MB

  • Sample

    221016-c1drhageen

  • MD5

    2c9978e32806c6dbd072e3c096faab9b

  • SHA1

    b8b57494825db6a0296c140ffc267478ea9e232f

  • SHA256

    e0375f4024f08ad2fd6e451a4ba6f70f29bdf1d1a3767e92fd325cbde1b28dde

  • SHA512

    8a873002d4fa315ba8b1de3c0afa1cf346a22e1e8edd220ae2487560b3887df97a54a5b227168ca2a2f44cad87af312ccd7c1484fd137537859a34ff9378fbd8

  • SSDEEP

    98304:haPoBhz1aV6SAEdhvxWa9P593R8yAVp2HI:haPe1eZAEUadzR8yc4HI

Malware Config

Targets

    • Target

      e0375f4024f08ad2fd6e451a4ba6f70f29bdf1d1a3767e92fd325cbde1b28dde

    • Size

      3.6MB

    • MD5

      2c9978e32806c6dbd072e3c096faab9b

    • SHA1

      b8b57494825db6a0296c140ffc267478ea9e232f

    • SHA256

      e0375f4024f08ad2fd6e451a4ba6f70f29bdf1d1a3767e92fd325cbde1b28dde

    • SHA512

      8a873002d4fa315ba8b1de3c0afa1cf346a22e1e8edd220ae2487560b3887df97a54a5b227168ca2a2f44cad87af312ccd7c1484fd137537859a34ff9378fbd8

    • SSDEEP

      98304:haPoBhz1aV6SAEdhvxWa9P593R8yAVp2HI:haPe1eZAEUadzR8yc4HI

    • Wannacry

      WannaCry is a ransomware cryptoworm.

    • Contacts a large (3282) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Contacts a large (1297) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks