Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

11/03/2023, 17:42

230311-wabzrsce4s 7

11/03/2023, 17:39

230311-v79rmaaf64 7

Analysis

  • max time kernel
    30s
  • max time network
    33s
  • platform
    windows7_x64
  • resource
    win7-20230220-en
  • resource tags

    arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
  • submitted
    11/03/2023, 17:39

General

  • Target

    vsco5.exe

  • Size

    3.0MB

  • MD5

    c553f139181d01a43f01717c22561358

  • SHA1

    d27ea6cad2243664fa6527cc3da748b5bd325d13

  • SHA256

    11f018d561566d75529ecb3c98c0a03ab9bb61e1a6b037a13b102692242363b4

  • SHA512

    be8708007699e1dd104a1806da722e08a817b94dbd941773817ed5decab521dc4a7fe5702e78c1be66d1cf9c737f486309381025c458397b75a3584c5bb44dc6

  • SSDEEP

    49152:qKm51jc9rTJxuSric6c1+LncxpfnObRoFUfSPsNUmPaifv1AiBYqi7K:Zmbj8rTJxuSxUqpfObRoFTjma7q

Score
7/10

Malware Config

Signatures

  • Checks BIOS information in registry 2 TTPs 2 IoCs

    BIOS information is often read in order to detect sandboxing environments.

Processes

  • C:\Users\Admin\AppData\Local\Temp\vsco5.exe
    "C:\Users\Admin\AppData\Local\Temp\vsco5.exe"
    1⤵
    • Checks BIOS information in registry
    PID:1376

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1376-54-0x000000013FB20000-0x000000014019A000-memory.dmp

    Filesize

    6.5MB