Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
110s -
max time network
96s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
05/08/2024, 23:43
Behavioral task
behavioral1
Sample
26253630668d6d8549707b90dab962d0N.exe
Resource
win7-20240704-en
General
-
Target
26253630668d6d8549707b90dab962d0N.exe
-
Size
83KB
-
MD5
26253630668d6d8549707b90dab962d0
-
SHA1
840beb0c9e16cde73109a82fc660afda00a6afef
-
SHA256
35813631f10f22037bca57b15b083f1e9caa21a8d10bc102e8fca5bfd5da124a
-
SHA512
f2bd9045aa7a7c5aee6a91795145c415ba8264d992a692d18d01a0cab1b821890c01ec70d6c543fdacdabb2f60e005ac408e728fa0a12e0e4364fd828c28da62
-
SSDEEP
1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+RK:LJ0TAz6Mte4A+aaZx8EnCGVuR
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/3796-0-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/3796-1-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/3796-7-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/files/0x000300000001e739-11.dat upx behavioral2/memory/3796-14-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/3796-21-0x0000000000400000-0x000000000042A000-memory.dmp upx -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 26253630668d6d8549707b90dab962d0N.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
83KB
MD5b8e7b41cd8e11c3e99b10d7acfb3de83
SHA17bf5dc0980f05a3f7cb24518b5cd9d7e7d8d6825
SHA25691ecea12f6b072ef128efc6e83546d0fc97f41d4b0625872ac8aeb005c4f22f9
SHA5125527fd02fd37e403b89717391be3f30f3c81b14543b6330b0f148b979e20ca59c553df404d3402c86f99a9eef24d7f99f748ff5b9da53818822deb40b8c6dcac