Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

4

Static

static

3

CRABackup.exe

windows7-x64

4

CRABackup.exe

windows10-2004-x64

4

Analysis

  • max time kernel
    143s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    12/10/2023, 13:01

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    CRABackup.exe

  • Size

    510KB

  • MD5

    e9ba5c96bce97b2f775576bf3987feb9

  • SHA1

    29fb8ceff9021b37e00b7bc4912b1a9af7a0ba1d

  • SHA256

    37dc758a392f09dfe1036563545f62f92a3170db0b47f0de54313342fd04df2c

  • SHA512

    590f496cd6daa8e35f2a94c448d31a709067f8e4e30b71de4a1187503f5483d5e2988c2553e6f5f4c9329ca36e787127755d407a9b472236aa0a748ca0146bc4

  • SSDEEP

    6144:pkwhWxwf3hEIQUCTqDZq8rF5ISCwPbitY8rDW+RDpGi7frgfuD5gopFm3:eWf3hVFBg4Fg28ri+RDpGi7frgmlF

Score
4/10

Malware Config

Signatures

  • Drops file in Windows directory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\CRABackup.exe
    "C:\Users\Admin\AppData\Local\Temp\CRABackup.exe"
    1⤵
    • Drops file in Windows directory
    PID:652

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Windows\daview.ini
    Filesize

    43B

    MD5

    f62435ab1ad700717edb451c0f5fca63

    SHA1

    e56bf0e8d44779ab44b81134e6133580f7d71ec5

    SHA256

    74d3476a6c6502654fb2177fa7a9194390b15fdf1e6c10248ae71aa6cb8ebf2a

    SHA512

    97b5ff23670eca3071d5e09fb7e85ff7c86aed6f79042fc6d57c11b466b8a8cb963781730183bbc864173be19b4b86f21dbbdb66f96aacea2439a16716f52118

    Download Submit

  • C:\Windows\daview.ini
    Filesize

    70B

    MD5

    2882333cbb14e6620e8c624a39538cbf

    SHA1

    5557f39e6f62cd01020f2933b883b138ec75eddf

    SHA256

    1e2a8e1a96811e66f084b1f9ea0c41aa9ac07bb90d5ca258648fbe5e1b567c38

    SHA512

    31b11fddc808e6532a92a743709aedc7bad6ed0cd588e44bdc56a7730bbaeb71a850493a03864cc53de374357600a28a4f3c8975f515bd2aa76e62b9de410472

    Download Submit

  • C:\Windows\daview.ini
    Filesize

    205B

    MD5

    c063048147accb4b95ab527a515f1518

    SHA1

    8ef036baaa58b4679274dfec35a7ed0a6ba703a9

    SHA256

    35f7af77e6b33b88bed34ffc3ee95a6d9c63a70aca851f610a9d590e192cd3cd

    SHA512

    84f4f1316cfd507aa81a884f9f72919cfa5cd22beb99e330669cf4686e2d9abd5dbf584dce63daf0c1404f9857817756d6ec987cf807936804cea460e69cec96

    Download Submit

  • memory/652-0-0x0000000000A40000-0x0000000000AC3000-memory.dmp

    Filesize

    524KB

    Download

  • memory/652-1-0x0000000073E40000-0x00000000745F0000-memory.dmp

    Filesize

    7.7MB

    Download

  • memory/652-51-0x0000000005A50000-0x0000000005A60000-memory.dmp

    Filesize

    64KB

    Download

  • memory/652-52-0x0000000073E40000-0x00000000745F0000-memory.dmp

    Filesize

    7.7MB

    Download