Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
148s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
06/08/2024, 03:46
General
-
Target
d4b8014a57142265ac47b3e29f68de51eb145b62ae613f7efb8ff1fe4fb22c8c.exe
-
Size
430KB
-
MD5
298a7a066f6684d6d0166cbbbfd664a4
-
SHA1
b57b4c8bd303d0779c88c7449ca296efd2ca82db
-
SHA256
d4b8014a57142265ac47b3e29f68de51eb145b62ae613f7efb8ff1fe4fb22c8c
-
SHA512
ad341fdf136984926d27b890ab4fe807e1afd1ab97c78225aa46929192b6544f4142151f15be19b61b1f5dbab4d178d5571d8cef6d57a209f6602df4a13a2f98
-
SSDEEP
6144:lvRscHtVzjwIRFzJZ2p26+jFWXYnj9iT2ebvXmUcCqkmAO2djXH7icD53:lvRs4OIm2hWX4U2ebvRUAd77n3
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of FindShellTrayWindow 1 IoCs
-
Suspicious use of SendNotifyMessage 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\d4b8014a57142265ac47b3e29f68de51eb145b62ae613f7efb8ff1fe4fb22c8c.exe"C:\Users\Admin\AppData\Local\Temp\d4b8014a57142265ac47b3e29f68de51eb145b62ae613f7efb8ff1fe4fb22c8c.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage