Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
94s -
max time network
127s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
-
submitted
24/12/2023, 23:34
General
-
Target
19f5f37b0f3b900ddf69c35807ee2551.exe
-
Size
191KB
-
MD5
19f5f37b0f3b900ddf69c35807ee2551
-
SHA1
659012fea48ae75db007f1a3f20ae83b0acd6a1c
-
SHA256
231e838d95e20a4d1647480e7ce8b96abdb2e528ba8629a3e6edf66dc624b560
-
SHA512
d1c996dcd8fdf1ff901523e0baf57ca325f54e3bd2881aef4a4022a1364461e3cf46ec022e5caf0a0e3c7e83138b2fe774aed609ee74a22d6c1e4ab1af8cf9d2
-
SSDEEP
3072:HADWbKzKbQmSVdSme+xmJyD4BliqzsmmEpEmboQd+ccewkyeZyYPuvGCJ30EZ0dE:HAVySV1eY4k437d+4wkTHdS2XlO
Score
7/10
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 1 IoCs
Looks up country code configured in the registry, likely geofence.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\19f5f37b0f3b900ddf69c35807ee2551.exe"C:\Users\Admin\AppData\Local\Temp\19f5f37b0f3b900ddf69c35807ee2551.exe"1⤵
- Checks computer location settings
- Suspicious use of SetWindowsHookEx