Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
281s -
max time network
284s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
20/04/2023, 02:12
General
-
Target
ClassicSvc.exe
-
Size
10.6MB
-
MD5
385ca557571ff7c65d25b15426f9a8b6
-
SHA1
04e87e27d503b7e1ceda5388db0202ed6a414faf
-
SHA256
7fdbe1e9f540292f53d41452663b1b117077f9db5d5dd68947005c8dc3db9896
-
SHA512
4cafd9e25203b165773bcc23dc7bb41a3c90a2651bdd15934c9b0ad4bea0f9637141ed794d62002042033b4a994a7c983911deaa8998f84f3ddede6e2fb7719e
-
SSDEEP
196608:QAf0mFtpmjEBHvqj+nWR35GIqypmBuwQhsN+2k:QAf00fmoFy+W3kFcmkM+d
Score
7/10
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 1 IoCs
Looks up country code configured in the registry, likely geofence.
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ClassicSvc.exe"C:\Users\Admin\AppData\Local\Temp\ClassicSvc.exe"1⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
11.2MB
-
Filesize
32KB