Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

25/08/2024, 10:12

240825-l8vvesyeke 3

25/08/2024, 10:07

240825-l5r95aycpa 3

Analysis

  • max time kernel
    531s
  • max time network
    434s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25/08/2024, 10:07

General

  • Target

    The Henry Stickmin Collection/Adobe AIR/Versions/1.0/Resources/CaptiveAppEntry.exe

  • Size

    81KB

  • MD5

    4ed66c7994f6ed261fe3bd0d95535796

  • SHA1

    a34c10f75d1a1d405bb0a78c7c87bab2f623c89e

  • SHA256

    03e67b6cd84650a56d6ed8f9a8c04de14c5660ecd715dc5cd4c7e8cf04acf886

  • SHA512

    1bfc79e1ef9f13332276dd48cd6372eeb7faa5e77779200571f26de6743b6434e2197b7079783726a32fadf82bf6c59747b09101b010a0a29e38c5ce86fa2d9e

  • SSDEEP

    1536:9ynfkRc7VR7s8Vk7rf9MjNqgKI15Fo+QfssWncdf70MSVF28:9cR7HVcrFONqdOvS3f7fSVF7

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\The Henry Stickmin Collection\Adobe AIR\Versions\1.0\Resources\CaptiveAppEntry.exe
    "C:\Users\Admin\AppData\Local\Temp\The Henry Stickmin Collection\Adobe AIR\Versions\1.0\Resources\CaptiveAppEntry.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:3204

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads