Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
log.txt
-
Size
349B
-
Sample
240514-3jbtpaee56
-
MD5
afafba9827d8dce0007c2daa54737fce
-
SHA1
5868580dc513db7429aed5fe779f1cd742764c95
-
SHA256
a7c02c784c49253d6272d33cc2b5e3a5e59222fb81525e9e152fce8b21da2d24
-
SHA512
7d3dcc99af48853204ff6975aec4bed01363529c2474b26434a0fc092c48b5ed6922c20e684ccca0a5e06ed6f0a4f3b0b7fec6ccc619b788fb46e8a9479cc1f6
Static task
static1
Behavioral task
behavioral1
Sample
log.txt
Resource
win11-20240508-en
Malware Config
Extracted
C:\Users\Admin\Downloads\@[email protected]
wannacry
12t9YDPgwueZ9NyMgw519p7AA8isjr6SMw
Targets
-
-
Target
log.txt
-
Size
349B
-
MD5
afafba9827d8dce0007c2daa54737fce
-
SHA1
5868580dc513db7429aed5fe779f1cd742764c95
-
SHA256
a7c02c784c49253d6272d33cc2b5e3a5e59222fb81525e9e152fce8b21da2d24
-
SHA512
7d3dcc99af48853204ff6975aec4bed01363529c2474b26434a0fc092c48b5ed6922c20e684ccca0a5e06ed6f0a4f3b0b7fec6ccc619b788fb46e8a9479cc1f6
-
Modifies WinLogon for persistence
-
Downloads MZ/PE file
-
Drops file in Drivers directory
-
Modifies RDP port number used by Windows
-
Sets service image path in registry
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Drops startup file
-
Executes dropped EXE
-
Loads dropped DLL
-
Modifies file permissions
-
Registers COM server for autorun
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
-
Sets desktop wallpaper using registry
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
4Registry Run Keys / Startup Folder
3Winlogon Helper DLL
1Privilege Escalation
Boot or Logon Autostart Execution
4Registry Run Keys / Startup Folder
3Winlogon Helper DLL
1Defense Evasion
File and Directory Permissions Modification
1Hide Artifacts
1Hidden Files and Directories
1Modify Registry
7Subvert Trust Controls
1Install Root Certificate
1