Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-08-04_05f7a0b9dda7596f441a939b622c5ba1_wannacry

  • Size

    5.0MB

  • Sample

    240804-plm3vavepl

  • MD5

    05f7a0b9dda7596f441a939b622c5ba1

  • SHA1

    95b062f883c1fadbff1a119e0effb4cdb92b54d9

  • SHA256

    71bc8c76b2382e03192d0289b37b2bc1881061516005576d5ca1e73757c62065

  • SHA512

    453dee6e03b6da1f6283229abac5a14a3ab9887fef7c8b308f0e2a8376eca717dc3ab8cb0ec2d8ce3052b53f252e3601be709a3cff75b70652167ed5e58c28a2

  • SSDEEP

    98304:oDqPoBhz1aRxcSUDk36SAEdhvxWa9P593R8yAVp2H:oDqPe1Cxcxk3ZAEUadzR8yc4H

Malware Config

Targets

    • Target

      2024-08-04_05f7a0b9dda7596f441a939b622c5ba1_wannacry

    • Size

      5.0MB

    • MD5

      05f7a0b9dda7596f441a939b622c5ba1

    • SHA1

      95b062f883c1fadbff1a119e0effb4cdb92b54d9

    • SHA256

      71bc8c76b2382e03192d0289b37b2bc1881061516005576d5ca1e73757c62065

    • SHA512

      453dee6e03b6da1f6283229abac5a14a3ab9887fef7c8b308f0e2a8376eca717dc3ab8cb0ec2d8ce3052b53f252e3601be709a3cff75b70652167ed5e58c28a2

    • SSDEEP

      98304:oDqPoBhz1aRxcSUDk36SAEdhvxWa9P593R8yAVp2H:oDqPe1Cxcxk3ZAEUadzR8yc4H

    • Wannacry

      WannaCry is a ransomware cryptoworm.

    • Contacts a large (3268) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks