Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

1

UC50hidrive-backup.sh

ubuntu-18.04-amd64

1

UC50hidrive-backup.sh

debian-9-armhf

1

UC50hidrive-backup.sh

debian-9-mips

UC50hidrive-backup.sh

debian-9-mipsel

post-install.sh

ubuntu-18.04-amd64

1

post-install.sh

debian-9-armhf

1

post-install.sh

debian-9-mips

post-install.sh

debian-9-mipsel

pre-install.sh

ubuntu-18.04-amd64

1

pre-install.sh

debian-9-armhf

1

pre-install.sh

debian-9-mips

pre-install.sh

debian-9-mipsel

pre-uninstall.sh

ubuntu-18.04-amd64

1

pre-uninstall.sh

debian-9-armhf

1

pre-uninstall.sh

debian-9-mips

pre-uninstall.sh

debian-9-mipsel

start-stop.sh

ubuntu-18.04-amd64

1

start-stop.sh

debian-9-armhf

1

start-stop.sh

debian-9-mips

start-stop.sh

debian-9-mipsel

bin/aborter

ubuntu-18.04-amd64

1

bin/cron_manager

ubuntu-18.04-amd64

1

bin/launcher

ubuntu-20.04-amd64

1

bin/lftp

ubuntu-20.04-amd64

1

bin/sshpass

ubuntu-20.04-amd64

1

webman/hid...kup.js

windows7-x64

3

webman/hid...kup.js

windows10-2004-x64

3

webman/lan...-cs.js

windows7-x64

3

webman/lan...-cs.js

windows10-2004-x64

3

webman/lan...-da.js

windows7-x64

3

webman/lan...-da.js

windows10-2004-x64

3

webman/lan...-DE.js

windows7-x64

3

Analysis

  • max time kernel
    135s
  • max time network
    128s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240426-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
  • submitted
    21/05/2024, 05:50

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    webman/langs/lang-cs.js

  • Size

    1KB

  • MD5

    feb2e9571f5da8c8c2f7eb604fa6d3e1

  • SHA1

    521c8d7b7b9e918310d6bdc36af1e0b94445c3b8

  • SHA256

    f05232e1781208195b57e211c9a860a7fe1d66b9e72b6b49df3d5ab845052469

  • SHA512

    0af272ef24483a9f5aff19c34fe2b0ea067d05d90cbbdeea37a994d0c68d3129b8d791742b70b2571e5afe478b25207a9b66d5813095fbbb8f1298c0c714d289

Score
3/10
execution

Malware Config

Signatures

Processes

  • C:\Windows\system32\wscript.exe
    wscript.exe C:\Users\Admin\AppData\Local\Temp\webman\langs\lang-cs.js
    1⤵
      PID:3172

    Network

    MITRE ATT&CK Enterprise v15

    Replay Monitor

    Loading Replay Monitor...

    Downloads