Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
119s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
-
submitted
06/08/2024, 08:26
General
-
Target
BACeye.exe
-
Size
6.6MB
-
MD5
38ce82a78c215232f7980d7ff88b8705
-
SHA1
c04adca32f07d922b8a83fd7d5b3b2f6d4bdf936
-
SHA256
762a912b3b96762c92c80d30c879cd6688c921aca3c00a964cd2cfd699e1eabb
-
SHA512
e99965458dc1bf48f4348fde24825a5d3269b143a190bd965ab56181fa6826c8247e550dd8834198eceb29813034a4b73277ea7699c1f5bef07a45c14ec3b556
-
SSDEEP
49152:RDyO9PuUsfWky2iOxCqxKD+yUKn+3NWC8+gjMNaZz4s821LvsAD56Aor32T8Y/+u:dPuUDNOxCqxKD+34yaZz4sR9
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\BACeye.exe"C:\Users\Admin\AppData\Local\Temp\BACeye.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
6KB
MD5c1d7d55d9f6f44129edfd935f3b53304
SHA127c2319482cfe88d2ee11902a60be22946caab2f
SHA25633cfd4ea73c5af0909412a500466f3e1f7ec1db34de6c7f051539aa192ca8d19
SHA512658e4f017d0d4b79a50552e02e2da13c1531e635000555d5a47d71a04467ef451d7c7cd2e0c4a90251f7216e352cc0e15bc3e2085075824ea0fdaa5806f071b8
-
Filesize
1008KB
-
Filesize
6.9MB
-
Filesize
160KB
-
Filesize
40KB
-
Filesize
40KB
-
Filesize
4KB
-
Filesize
6.6MB
-
Filesize
6.9MB
-
Filesize
4KB
-
Filesize
6.9MB
-
Filesize
40KB
-
Filesize
6.9MB