Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    b9bef10e5b2b11a40f9b330256fcb38e_JaffaCakes118

  • Size

    5.0MB

  • Sample

    240823-bb275azbjk

  • MD5

    b9bef10e5b2b11a40f9b330256fcb38e

  • SHA1

    7b9882c6f78bc6c7fa601a4651a06be3c04446d1

  • SHA256

    415f222902a8681030f8718769f47d9877799ade0269b3229a0a322cb6c33f13

  • SHA512

    dc6f9852429e10ced07f6a28a649dd6303ec8d8f57847742f3f556258b480fbd0a28fe9e700de889956fcf162b6645cbd30104de369801dfeb8410332e75b36d

  • SSDEEP

    98304:TDqPoBhz1aRxcSUDk36SAEdhvxWa9P593R:TDqPe1Cxcxk3ZAEUadzR

Malware Config

Targets

    • Target

      b9bef10e5b2b11a40f9b330256fcb38e_JaffaCakes118

    • Size

      5.0MB

    • MD5

      b9bef10e5b2b11a40f9b330256fcb38e

    • SHA1

      7b9882c6f78bc6c7fa601a4651a06be3c04446d1

    • SHA256

      415f222902a8681030f8718769f47d9877799ade0269b3229a0a322cb6c33f13

    • SHA512

      dc6f9852429e10ced07f6a28a649dd6303ec8d8f57847742f3f556258b480fbd0a28fe9e700de889956fcf162b6645cbd30104de369801dfeb8410332e75b36d

    • SSDEEP

      98304:TDqPoBhz1aRxcSUDk36SAEdhvxWa9P593R:TDqPe1Cxcxk3ZAEUadzR

    • Wannacry

      WannaCry is a ransomware cryptoworm.

    • Contacts a large (3304) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks