Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
-
submitted
24/08/2024, 04:52
General
-
Target
dab0ff85d85599eda82450d99d75e48909e84cbf4797c00e9debc04c2ffb6e16.exe
-
Size
5.9MB
-
MD5
5f90cab097cdb035959cbbcfcde65fc7
-
SHA1
edd5bea4ea8f983e80e44faf18f8428fbb891894
-
SHA256
dab0ff85d85599eda82450d99d75e48909e84cbf4797c00e9debc04c2ffb6e16
-
SHA512
1b9fa6718387a4830bd1a360bcb0b45f8403c02d7eb00010400c1e23ff70ec98d3a91bc50dc2023d83ae2597d25bc1e72c114447a5357d4854c4c32164e49dbc
-
SSDEEP
49152:EnQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQk:j
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Drops file in System32 directory 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\dab0ff85d85599eda82450d99d75e48909e84cbf4797c00e9debc04c2ffb6e16.exe"C:\Users\Admin\AppData\Local\Temp\dab0ff85d85599eda82450d99d75e48909e84cbf4797c00e9debc04c2ffb6e16.exe"1⤵
- Drops file in System32 directory
-
C:\Windows\SysWOW64\svrwsc.exeC:\Windows\SysWOW64\svrwsc.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
6.3MB
MD55aaba8b839bc13ec3112889c4a5a20ec
SHA1b8f520b5ee1ee2fda9e555cc9f4fc9b2e37a55cc
SHA256ea216c64ced7ece456724766b93415b362bd9422d7c23baebda509d89ffedcee
SHA512b9e3baf51d4eb6cbde28390f6ba874352edd40c4fb32b4a9a100f701c48b93a970e9b98b3017485ebff94cd1311c5860e66dce3d0e0b3eba06a7ebe189f1e070
-
Filesize
172KB
-
Filesize
172KB
-
Filesize
20KB
-
Filesize
172KB
-
Filesize
172KB