Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    101a1cafaf46738bb5553e8adb484344

  • Size

    73KB

  • Sample

    231219-2fm7wacbh2

  • MD5

    101a1cafaf46738bb5553e8adb484344

  • SHA1

    79f8137cb918b22e9875144c78a85486a476d9f3

  • SHA256

    c62550680af5648d663567b670fb23d2ccce0485ddcab2a12f72999c2d622d67

  • SHA512

    1fefd62f935f4f6247e184fc847c222811433d20b54ec361e909ffbd09117cc9026d85d94b77642d7dac8c5590fc79bd6614152973c74322ebab3a20e11a05b8

  • SSDEEP

    1536:3wRY6IofX9qkIXiBY/K/l424hrSWn/WHVUqp5az+nKy2:r6IofX9qkIXiB6K/+24hrSWn/WHV3aCK

Score
10/10

Malware Config

Targets

    • Target

      101a1cafaf46738bb5553e8adb484344

    • Size

      73KB

    • MD5

      101a1cafaf46738bb5553e8adb484344

    • SHA1

      79f8137cb918b22e9875144c78a85486a476d9f3

    • SHA256

      c62550680af5648d663567b670fb23d2ccce0485ddcab2a12f72999c2d622d67

    • SHA512

      1fefd62f935f4f6247e184fc847c222811433d20b54ec361e909ffbd09117cc9026d85d94b77642d7dac8c5590fc79bd6614152973c74322ebab3a20e11a05b8

    • SSDEEP

      1536:3wRY6IofX9qkIXiBY/K/l424hrSWn/WHVUqp5az+nKy2:r6IofX9qkIXiB6K/+24hrSWn/WHV3aCK

    Score
    9/10
    • Contacts a large (20558) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

MITRE ATT&CK Enterprise v15

Tasks