Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
148s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
19/08/2024, 23:06
General
-
Target
e45a363d955a768b912feabe00b82e0e90411bb0e1aa6eda8606cefa651bd182.exe
-
Size
2.5MB
-
MD5
77b63c5ad36740aeea1a2a95a6cbd42b
-
SHA1
facbd9faef1a0c43d45e7e7238e9a6c7946a6022
-
SHA256
e45a363d955a768b912feabe00b82e0e90411bb0e1aa6eda8606cefa651bd182
-
SHA512
74f3182a325fcd33580a0583100901b07bab9f25844b519efe3a67b75bd16775eb51d541591215a5dac56d54b0d30ea9420a955f1259c50f6212a0b4050da7b5
-
SSDEEP
49152:Bxyj/2F3witvs6KhzL5USpbsISTb/am5B8y6sEUhSSwTFUyV:Bxyr2F3wKvsvLvpbsIW/amj8yF8S6
Score
6/10
Malware Config
Signatures
-
Enumerates connected drives 3 TTPs 1 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\e45a363d955a768b912feabe00b82e0e90411bb0e1aa6eda8606cefa651bd182.exe"C:\Users\Admin\AppData\Local\Temp\e45a363d955a768b912feabe00b82e0e90411bb0e1aa6eda8606cefa651bd182.exe"1⤵
- Enumerates connected drives
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses