Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
Снимок экрана (3).png
-
Size
1.1MB
-
Sample
250206-1dktaszjgn
-
MD5
e8169d279e1fd2447bd669cde4363047
-
SHA1
5e9921d7695d6c662e6262294db9a58c22bd82b4
-
SHA256
7c358d89a1611cd052878d989af155de9e8e656e80a9f77dff2ea54a1951a503
-
SHA512
f23a9f2500a6281286ff3e664e2ca2594a4b3641f94c3d2d5770d9a5a87a77e3066f766672b9a28414a4257f1a6a00b2d72889bf0b7afe1bef77c4eb0fd6f5bc
-
SSDEEP
24576:HGQatefmt1MlciEmKLJ9V2/PPeLYUW05C1P8frNfBC9gZ7fM:HGQatM7yt9oeLf7CNUVdk
Static task
static1
Behavioral task
behavioral1
Sample
Снимок экрана (3).png
Resource
win10ltsc2021-20250128-en
Malware Config
Extracted
C:\Users\Admin\Downloads\WannaCry-main\WannaCry-main\@[email protected]
wannacry
13AM4VW2dhxYgXeQepoHkHSQuy6NgaEb94
Targets
-
-
Target
Снимок экрана (3).png
-
Size
1.1MB
-
MD5
e8169d279e1fd2447bd669cde4363047
-
SHA1
5e9921d7695d6c662e6262294db9a58c22bd82b4
-
SHA256
7c358d89a1611cd052878d989af155de9e8e656e80a9f77dff2ea54a1951a503
-
SHA512
f23a9f2500a6281286ff3e664e2ca2594a4b3641f94c3d2d5770d9a5a87a77e3066f766672b9a28414a4257f1a6a00b2d72889bf0b7afe1bef77c4eb0fd6f5bc
-
SSDEEP
24576:HGQatefmt1MlciEmKLJ9V2/PPeLYUW05C1P8frNfBC9gZ7fM:HGQatM7yt9oeLf7CNUVdk
-
Wannacry family
-
Drops startup file
-
Executes dropped EXE
-
Modifies file permissions
-
Adds Run key to start application
-
File and Directory Permissions Modification: Windows File and Directory Permissions Modification
-
Legitimate hosting services abused for malware hosting/C2
-
Sets desktop wallpaper using registry
-
MITRE ATT&CK Enterprise v15
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
File and Directory Permissions Modification
2Windows File and Directory Permissions Modification
1Hide Artifacts
1Hidden Files and Directories
1Modify Registry
3