Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

mssecsvc.exe

windows7-x64

10

mssecsvc.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    mssecsvc.exe

  • Size

    3.6MB

  • Sample

    230529-cwz4yahf7v

  • MD5

    ec9b56e13d643ea6151c0e3ab9efef42

  • SHA1

    158c911049e2cef105d8f3c84d66db9b7fef3971

  • SHA256

    67f6f410bae46991e5d723beb5c4ace6416ee4ae5483e9d56935b57fa61862bc

  • SHA512

    8c13724cd9ba6dae92ab66b9bd69e9256ba58945f0d8e2bd5fa283558f1c85ab72ce9ddb2d6ff3a90afa3131683e55777231c096cc60ae92e1844b8602d55bdc

  • SSDEEP

    12288:GvbLgPlu+QhMbaIMu7L5NVErCA4z2g6rTc:2bLgddQhfdmMSirY

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      mssecsvc.exe

    • Size

      3.6MB

    • MD5

      ec9b56e13d643ea6151c0e3ab9efef42

    • SHA1

      158c911049e2cef105d8f3c84d66db9b7fef3971

    • SHA256

      67f6f410bae46991e5d723beb5c4ace6416ee4ae5483e9d56935b57fa61862bc

    • SHA512

      8c13724cd9ba6dae92ab66b9bd69e9256ba58945f0d8e2bd5fa283558f1c85ab72ce9ddb2d6ff3a90afa3131683e55777231c096cc60ae92e1844b8602d55bdc

    • SSDEEP

      12288:GvbLgPlu+QhMbaIMu7L5NVErCA4z2g6rTc:2bLgddQhfdmMSirY

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3240) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Contacts a large (1557) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks