Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

1

svchost.exe

windows7-x64

8

svchost.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    svchost.exe

  • Size

    283KB

  • Sample

    230421-bkp9xsdd24

  • MD5

    820999a17f6c2b1d67b4d81db8a9be4a

  • SHA1

    db2349dde07e3bc8ecd9ef8704be7fe8d923a587

  • SHA256

    b0cf99edf8af0ae79fa70a46fd38f03fea4146067ab41e9aea100aa4c96a2d38

  • SHA512

    211433be1d58b14c7f7d229a27607716b3f6db94aeeb054888d48f167b7ad0a996c5ccf413ff6b2857545a2f4b178d883e97ebbff0bcf4d6caa350dcabc746bb

  • SSDEEP

    6144:Aj12paTknvnpNjsxpwcG+eYkmlynjsETa4HXueA1qDf0eTL2gFK:i2pbvCtGvYkm1ETx3ueAADTag

Score
8/10
evasionpersistence

Malware Config

Targets

    • Target

      svchost.exe

    • Size

      283KB

    • MD5

      820999a17f6c2b1d67b4d81db8a9be4a

    • SHA1

      db2349dde07e3bc8ecd9ef8704be7fe8d923a587

    • SHA256

      b0cf99edf8af0ae79fa70a46fd38f03fea4146067ab41e9aea100aa4c96a2d38

    • SHA512

      211433be1d58b14c7f7d229a27607716b3f6db94aeeb054888d48f167b7ad0a996c5ccf413ff6b2857545a2f4b178d883e97ebbff0bcf4d6caa350dcabc746bb

    • SSDEEP

      6144:Aj12paTknvnpNjsxpwcG+eYkmlynjsETa4HXueA1qDf0eTL2gFK:i2pbvCtGvYkm1ETx3ueAADTag

    Score
    8/10
    evasionpersistence

    • Modifies Windows Firewall

      evasion

    • Drops startup file

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks