Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
133s -
max time network
108s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
23/08/2024, 11:10
Static task
static1
Behavioral task
behavioral1
Sample
dolzhnzhnvnvnvnvnvnvnvnvnvnvF_F_BBF_BBF_F_F_F_BF_.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
dolzhnzhnvnvnvnvnvnvnvnvnvnvF_F_BBF_BBF_F_F_F_BF_.exe
Resource
win10v2004-20240802-en
General
-
Target
dolzhnzhnvnvnvnvnvnvnvnvnvnvF_F_BBF_BBF_F_F_F_BF_.exe
-
Size
1.6MB
-
MD5
532b2bf2f4e916689878e089d1ce43d0
-
SHA1
1bcb2b2ae5cddbe043d4a80185416bb56b5e6870
-
SHA256
5e7ac5853a164d44502a79a79b2250d7b879b27f0e86900ff14ff7f45b31a084
-
SHA512
565d8ddc7f5b958b8e6c2a2a6181f4ef1362e25e3bc00f33b4ff8c380e3a1015a8064364d93b216c468649bffedb21cb34c97c3d32916ccf7c81c90e6991bd09
-
SSDEEP
49152:myAvBG605HSUVaOgWd6DimBaucOU7m6Ntv4:myUBbeHDkTANOU7zv4
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language dolzhnzhnvnvnvnvnvnvnvnvnvnvF_F_BBF_BBF_F_F_F_BF_.exe