Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    150s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    10/03/2024, 02:58

General

  • Target

    8462152e50ac014a543d7673e3a775b264c01350c58ca87ec8b1acf9708d1366.exe

  • Size

    10.0MB

  • MD5

    bcc5015411f78ffd7e1d22417aee653b

  • SHA1

    d0d57fd98b51199aa0462f09e04f5372d36f1df6

  • SHA256

    8462152e50ac014a543d7673e3a775b264c01350c58ca87ec8b1acf9708d1366

  • SHA512

    978fb5a5bac2bb6e2dcda5f205388838b431f3b91850af7d9c72958616d29a8b287b20b2ec7d3db2689fd52baebf7b82c387228035ed3f5522b175a17cb10989

  • SSDEEP

    196608:WN4iFKfbwhyejyzaSmILdyMWQmG1i5VACf9n03DMAFPCQzFrpg60:WNTFGchyeF/E1WLAcnBYPCQzFd0

Score
7/10

Malware Config

Signatures

  • Checks computer location settings 2 TTPs 1 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\8462152e50ac014a543d7673e3a775b264c01350c58ca87ec8b1acf9708d1366.exe
    "C:\Users\Admin\AppData\Local\Temp\8462152e50ac014a543d7673e3a775b264c01350c58ca87ec8b1acf9708d1366.exe"
    1⤵
    • Checks computer location settings
    • Suspicious use of SetWindowsHookEx
    PID:2556

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads