Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
135s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
14/08/2024, 11:03
Static task
static1
Behavioral task
behavioral1
Sample
e3f75c98e19a9f3a1274d198d32b6e105d6676d9a54d403d65d0e4f034ab5d85.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
e3f75c98e19a9f3a1274d198d32b6e105d6676d9a54d403d65d0e4f034ab5d85.exe
Resource
win10v2004-20240802-en
General
-
Target
e3f75c98e19a9f3a1274d198d32b6e105d6676d9a54d403d65d0e4f034ab5d85.exe
-
Size
10.9MB
-
MD5
2ff15fadabf52afbada665fc8f5d7d5d
-
SHA1
74d19d67cd3d178523f8314108bbf0380bc5219f
-
SHA256
e3f75c98e19a9f3a1274d198d32b6e105d6676d9a54d403d65d0e4f034ab5d85
-
SHA512
593edcdbbd7ce4935547ad7314b375fc80af1cc3694a8b4bf7fc7fe07cf76f120e4ab547621411ed4ef1df67916275b139d9dbb3d622fc641f78aaabfd401ae4
-
SSDEEP
196608:ubGnWW5WySSJ7PbDdh0HtQba8z1sjzkAilU4I4:uKnW6Wy5J7PbDjOQba8psjzyz
Malware Config
Signatures
-
Downloads MZ/PE file
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language e3f75c98e19a9f3a1274d198d32b6e105d6676d9a54d403d65d0e4f034ab5d85.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2528 e3f75c98e19a9f3a1274d198d32b6e105d6676d9a54d403d65d0e4f034ab5d85.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\e3f75c98e19a9f3a1274d198d32b6e105d6676d9a54d403d65d0e4f034ab5d85.exe"C:\Users\Admin\AppData\Local\Temp\e3f75c98e19a9f3a1274d198d32b6e105d6676d9a54d403d65d0e4f034ab5d85.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:2528
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
9KB
MD5bb405fe3d893b9f5c0fad0a6b7e7e2ab
SHA12f8a068bb327f5a5929c658b37b14befa4a1cfa4
SHA2567c222634edaa9da564213c74052cbef460ab1a6e24ef354da9d39bd95ec9110b
SHA512a811284721f65b337cf3b8462dfa9299e0dd2a0d0d4889dae56e1acc3ef383cc6aa5a5007e643016ecc5dd3a07b1c34aeb2c7b7d69fc8f1cba7da09158cbf660
-
Filesize
38B
MD5e471ebfc7e73ea4957904ccef30f0aa0
SHA1e81bb3f218062fe2aaa69bbd827103052367bea1
SHA256fbfd28a80fa4765d0b4ac101a187574463bafa5e1f9599a22bc665648083808b
SHA5123c80a6c70581645fe52d63ff8f6c1345840513084460433b26e9b8f741747d438e14d5e08edad4d67ccefcfbd373a07778768ada05f8a5a133bb330def794d70