Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
134s -
max time network
129s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
17/08/2024, 09:26
Static task
static1
Behavioral task
behavioral1
Sample
3b921b3b1f68c419c67c2d45db78a5d682bac051ef306574f64a093896baecd6.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3b921b3b1f68c419c67c2d45db78a5d682bac051ef306574f64a093896baecd6.exe
Resource
win10v2004-20240802-en
General
-
Target
3b921b3b1f68c419c67c2d45db78a5d682bac051ef306574f64a093896baecd6.exe
-
Size
5.6MB
-
MD5
1bf27507badb63486d19a469b8403a44
-
SHA1
c0d9a4456cfdc01c485dbba217cbe856fe3a434f
-
SHA256
3b921b3b1f68c419c67c2d45db78a5d682bac051ef306574f64a093896baecd6
-
SHA512
0382b9d5d1de2561f2ff6ac28baaec71946d095a1f14c74d4a6a2950d1b4047bfc1eeb5a6c5e8d2ec0b4fea2747788bc809d9361799ed6c87378ed5c8ddaf61f
-
SSDEEP
98304:vAgeIGcvtaXJ/fv/Gx+Rx4l7so0K5HJum+ze+Kj:n0vux+Rx4l7ROe
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 3b921b3b1f68c419c67c2d45db78a5d682bac051ef306574f64a093896baecd6.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4848 3b921b3b1f68c419c67c2d45db78a5d682bac051ef306574f64a093896baecd6.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\3b921b3b1f68c419c67c2d45db78a5d682bac051ef306574f64a093896baecd6.exe"C:\Users\Admin\AppData\Local\Temp\3b921b3b1f68c419c67c2d45db78a5d682bac051ef306574f64a093896baecd6.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:4848