Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
135s -
max time network
106s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
25/08/2024, 19:45
General
-
Target
1a79f938c47bb7280bec491d7ffadb167c2e3cefe5facfabc7e9ded2985bfa12.exe
-
Size
2.1MB
-
MD5
7ff45bd8a76bed3f403e44f3e77f6390
-
SHA1
350f84c5ec6f363263738c8774c47711bfa02481
-
SHA256
1a79f938c47bb7280bec491d7ffadb167c2e3cefe5facfabc7e9ded2985bfa12
-
SHA512
7e75086df8dd461eda4ca368c865bbc608785d9c33558849372ed9f72ee911bf00d2457d9ba4a5ad2766ca6faf03448dcaf08e41c187ae8cdb4c5997f3ecf8d1
-
SSDEEP
24576:R06nmGhP82J0dPRt0FjXfqCNduHiSsw/Xt5wzGCqU4vk//TcJLEY87jEG3Jmy:Rf3n0dryCCNcQ/R/QJ2wcZ
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\1a79f938c47bb7280bec491d7ffadb167c2e3cefe5facfabc7e9ded2985bfa12.exe"C:\Users\Admin\AppData\Local\Temp\1a79f938c47bb7280bec491d7ffadb167c2e3cefe5facfabc7e9ded2985bfa12.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx