Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
93s -
max time network
96s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
15/07/2024, 04:57
Behavioral task
behavioral1
Sample
86dd4c39a4a197e1ccd07f32c7611230N.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
86dd4c39a4a197e1ccd07f32c7611230N.exe
Resource
win10v2004-20240709-en
General
-
Target
86dd4c39a4a197e1ccd07f32c7611230N.exe
-
Size
7.3MB
-
MD5
86dd4c39a4a197e1ccd07f32c7611230
-
SHA1
0a9a805adc1ffc90c634385f88cbefb989fb8e49
-
SHA256
335b5051cf7b2328a3530e0007f4ef16b1275cc3bfb79ed06c5d33fd401e65ed
-
SHA512
1cab2f7fffb740fb2dd8baeb604d455e3751da68d5c62e7333b9639c3da109aa5567aee5cf8f412d16cd073181179ca411d29e3215c342b36cff51de8ae1652d
-
SSDEEP
196608:k666666666666666666666666666666666vjjjjjjjjjjjjjjjjjjjjjjjjjjjjB:k666666666666666666666666666666W
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
pid Process 5096 svrwsc.exe -
resource yara_rule behavioral2/memory/4676-0-0x0000000000400000-0x000000000042B000-memory.dmp upx behavioral2/files/0x0009000000023444-4.dat upx -
Drops file in System32 directory 2 IoCs
description ioc Process File created C:\Windows\SysWOW64\svrwsc.exe 86dd4c39a4a197e1ccd07f32c7611230N.exe File created C:\Windows\SysWOW64\svrwsc.exe svrwsc.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\86dd4c39a4a197e1ccd07f32c7611230N.exe"C:\Users\Admin\AppData\Local\Temp\86dd4c39a4a197e1ccd07f32c7611230N.exe"1⤵
- Drops file in System32 directory
PID:4676
-
C:\Windows\SysWOW64\svrwsc.exeC:\Windows\SysWOW64\svrwsc.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
PID:5096
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
7.7MB
MD5fd3bd39cd73aadb0723e6638d6462708
SHA103cc1081f7e452d7a8f72ae9b74449ad791ec309
SHA256db48b424e53b71d532ab2762db4ce94295193004a39fecc1e8e672fddab05778
SHA512993142a0fd1abc12b309b260a9ec2de166c9dc20781d6b91d749ab78df7375e839354c5def6dab56ac2fd52575ebebc8300d69ee96ada1113fff2caa008b4de2