Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
128s -
max time network
137s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
25/12/2023, 10:55
General
-
Target
18cd51677fb6944317f3209b11b94d28.exe
-
Size
72KB
-
MD5
18cd51677fb6944317f3209b11b94d28
-
SHA1
7e8f9c59752365ac88b6c1added3765047f5863c
-
SHA256
52cfe43debf34b64f8f12f33bbc9e808dab4871c504172ba1368b8a79d73fc90
-
SHA512
18d07db2a90974021253a8ad11da2b74f5455585cf61717ba2a164cecb8fcfee1392af7f809318a3132917033d36ec29fae3e040c83687211a6d842340f4bc12
-
SSDEEP
1536:XmRSqKWQaI7xgHaFDujsxP3udhscFhwK8e0cg6YGF/YhhATllDU:X/Z2HcujsxPSscFhayYyYcTllDU
Malware Config
Signatures
-
Executes dropped EXE 2 IoCs
-
Drops file in System32 directory 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\18cd51677fb6944317f3209b11b94d28.exe"C:\Users\Admin\AppData\Local\Temp\18cd51677fb6944317f3209b11b94d28.exe"1⤵
- Drops file in System32 directory
-
C:\Windows\SysWOW64\mszrakbx.exeC:\Windows\SysWOW64\mszrakbx.exe /service1⤵
- Executes dropped EXE
-
C:\Windows\SysWOW64\mszrakbx.exeC:\Windows\SysWOW64\mszrakbx.exe /service1⤵
- Executes dropped EXE
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
72KB
MD518cd51677fb6944317f3209b11b94d28
SHA17e8f9c59752365ac88b6c1added3765047f5863c
SHA25652cfe43debf34b64f8f12f33bbc9e808dab4871c504172ba1368b8a79d73fc90
SHA51218d07db2a90974021253a8ad11da2b74f5455585cf61717ba2a164cecb8fcfee1392af7f809318a3132917033d36ec29fae3e040c83687211a6d842340f4bc12
-
Filesize
504B
MD50976908d31d7d83a0be1df38e0f8f3b2
SHA14accf4502e6f0e16a05d3ebb514cd67708a97f5d
SHA256a34f3fa42360147a037f7cf616ac5f0ec129d7e99615a747ce2f0c6767702023
SHA512039be76093671c684819f335bd3096cc2313f14310f0b4d3d9bbe2001986943a1b624841c2777983eedfdbe481ca468488c62f72c07b7f446348afdcc257b7d2
-
Filesize
280KB
-
Filesize
280KB
-
Filesize
108KB
-
Filesize
52KB
-
Filesize
280KB
-
Filesize
280KB
-
Filesize
280KB
-
Filesize
280KB