Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

2024-08-04...ry.exe

windows7-x64

10

2024-08-04...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-08-04_05f7a0b9dda7596f441a939b622c5ba1_wannacry

  • Size

    5.0MB

  • Sample

    240804-plm3vavepl

  • MD5

    05f7a0b9dda7596f441a939b622c5ba1

  • SHA1

    95b062f883c1fadbff1a119e0effb4cdb92b54d9

  • SHA256

    71bc8c76b2382e03192d0289b37b2bc1881061516005576d5ca1e73757c62065

  • SHA512

    453dee6e03b6da1f6283229abac5a14a3ab9887fef7c8b308f0e2a8376eca717dc3ab8cb0ec2d8ce3052b53f252e3601be709a3cff75b70652167ed5e58c28a2

  • SSDEEP

    98304:oDqPoBhz1aRxcSUDk36SAEdhvxWa9P593R8yAVp2H:oDqPe1Cxcxk3ZAEUadzR8yc4H

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      2024-08-04_05f7a0b9dda7596f441a939b622c5ba1_wannacry

    • Size

      5.0MB

    • MD5

      05f7a0b9dda7596f441a939b622c5ba1

    • SHA1

      95b062f883c1fadbff1a119e0effb4cdb92b54d9

    • SHA256

      71bc8c76b2382e03192d0289b37b2bc1881061516005576d5ca1e73757c62065

    • SHA512

      453dee6e03b6da1f6283229abac5a14a3ab9887fef7c8b308f0e2a8376eca717dc3ab8cb0ec2d8ce3052b53f252e3601be709a3cff75b70652167ed5e58c28a2

    • SSDEEP

      98304:oDqPoBhz1aRxcSUDk36SAEdhvxWa9P593R8yAVp2H:oDqPe1Cxcxk3ZAEUadzR8yc4H

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3268) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks