Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
109s -
max time network
110s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
25/08/2024, 07:43
Behavioral task
behavioral1
Sample
60ea860b00382b4b9ae3f075c51d9160N.exe
Resource
win7-20240708-en
2 signatures
120 seconds
General
-
Target
60ea860b00382b4b9ae3f075c51d9160N.exe
-
Size
210KB
-
MD5
60ea860b00382b4b9ae3f075c51d9160
-
SHA1
5c0fa8ccfbaf21e3023b40544a7d6b42bd9bed62
-
SHA256
51c09074e08ef0393e6947f96e2bf1c8b0263cf24e8fbbbf9246bb5fa30ce391
-
SHA512
b00089259f3e66733e2771e278ac152f0bf5ef89b793fb1eb63096e0b5322cd99dbaa67114e3646cef2888c306a34b288a3fa05bb06bc51e2d2880f15354bd6f
-
SSDEEP
3072:fnyiQSox5fpjvKdBgrkWHIjN3tj6qnv0b2UrXkbvL2:KiQSox5fpjvzIjNDv0bNXkbvL2
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/1144-0-0x0000000000400000-0x000000000040B000-memory.dmp upx behavioral2/memory/1144-1-0x0000000000400000-0x000000000040B000-memory.dmp upx -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 60ea860b00382b4b9ae3f075c51d9160N.exe