Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
105s -
max time network
109s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
26/07/2024, 15:22
Static task
static1
Behavioral task
behavioral1
Sample
2511d3d3aa51346ae8be3655a7d577d0N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2511d3d3aa51346ae8be3655a7d577d0N.exe
Resource
win10v2004-20240709-en
General
-
Target
2511d3d3aa51346ae8be3655a7d577d0N.exe
-
Size
468KB
-
MD5
2511d3d3aa51346ae8be3655a7d577d0
-
SHA1
1f551a09515618b8e00458d86d0e0b25e7905d46
-
SHA256
28ab9efcb93e9f79c179f74b7f257d339af4e802ac8ef905ee4a42a0747e82cd
-
SHA512
d18c2e654b28a54fa188a2d4ac36df5e7196f6d87e93971f90892a7afa98093113265b7e3ed09027056d861c6c74273aac103edb252941247f028dec1937e23b
-
SSDEEP
3072:/nCHovUuU35/tbYfPgt5Of8WE5Rh6IX1lmHdxSpVJIvwq8XuwPlU:/nWoCJ/tsPM5OfR2CcJIobXuw
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2511d3d3aa51346ae8be3655a7d577d0N.exe