Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
101s -
max time network
105s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
20/08/2024, 01:00
Behavioral task
behavioral1
Sample
b787582fddc69a6ea6647750ce0ad030N.exe
Resource
win7-20240704-en
2 signatures
120 seconds
General
-
Target
b787582fddc69a6ea6647750ce0ad030N.exe
-
Size
90KB
-
MD5
b787582fddc69a6ea6647750ce0ad030
-
SHA1
47e4a8a1f6b4968c56cf32fb6306dcf7606ceb66
-
SHA256
c7b7ac0dbe821f7e1a9a680cd07699e9f91571b6a4ac92c42ecd198f9a838021
-
SHA512
ebf8b627a3ee0ec1663d9b2303bdc5c0175f3ca88077cdbbeaa1e10178c6f3e743ba72a088a191917104b535a5451ed3ac938861fd4be83282777f18b8e2e3ba
-
SSDEEP
768:kBT37CPKKdJJ1EXBwzEXBwdcMc5LJp2V4sr:CTW7JJ7TUp2V4sr
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/3304-0-0x0000000000400000-0x000000000040A000-memory.dmp upx behavioral2/memory/3304-1-0x0000000000400000-0x000000000040A000-memory.dmp upx -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b787582fddc69a6ea6647750ce0ad030N.exe