Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

20/02/2024, 15:50

240220-s93d8abe65 8

20/02/2024, 15:31

240220-syjgzabc44 8

20/02/2024, 15:24

240220-ss225abb57 8

Analysis

  • max time kernel
    1799s
  • max time network
    1560s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    20/02/2024, 15:31

General

  • Target

    Overwatch Server Blocker.exe

  • Size

    248KB

  • MD5

    2dd1ef815043e4cad7a8824bda5749b4

  • SHA1

    ba1ce1ac279195d0d94142ddddf33169730a12f9

  • SHA256

    fe6ef89f60d6ee9658e4a95126daf760ab983996cdc32b11fa7cd222e52059d1

  • SHA512

    b96fa87ac5f7ad14e338f3314e91a5b05b65bcea9affaa4f37ac78385507642a45ee5a3b2237c2fca50ff0dfd9f6a8a42c308e3703fa065544e1fb24160ffb94

  • SSDEEP

    3072:Zg95y39boeOQ9WwzzLjE5UPtJ0zLjE5UZS1VlVo:Zg95c9b/ztPcztZmV

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\Overwatch Server Blocker.exe
    "C:\Users\Admin\AppData\Local\Temp\Overwatch Server Blocker.exe"
    1⤵
      PID:2196

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2196-0-0x00000000011F0000-0x0000000001234000-memory.dmp

      Filesize

      272KB

    • memory/2196-1-0x00000000741D0000-0x00000000748BE000-memory.dmp

      Filesize

      6.9MB

    • memory/2196-2-0x0000000004D70000-0x0000000004DB0000-memory.dmp

      Filesize

      256KB

    • memory/2196-3-0x0000000004D70000-0x0000000004DB0000-memory.dmp

      Filesize

      256KB

    • memory/2196-4-0x00000000741D0000-0x00000000748BE000-memory.dmp

      Filesize

      6.9MB

    • memory/2196-5-0x0000000004D70000-0x0000000004DB0000-memory.dmp

      Filesize

      256KB