Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    148s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26/08/2024, 05:29

General

  • Target

    1724650026a8e1ceb70062c09b0b3670a151d1ee2d8f06529a99d8a5702de685ec04134c58970.exe

  • Size

    483KB

  • MD5

    ccb8ba2e5828a30d43113b6dc6c38dfa

  • SHA1

    64fe5810a25d07fc8acad540c53aa84f4e029525

  • SHA256

    ec2b9c75aae260aaa63c0f3d102b57de762895659d5e7339c5342dbe77f29878

  • SHA512

    fff3656bf7f4cab451ce8bf296889c1d8b7edb1c7e7a261187c3b7442982f2433c728a411854fd63f89368ab214b04010bbe0ee935f212d3ae26135c47b39609

  • SSDEEP

    6144:QXIktXfM8Lv86r9uVWAa2je4Z5zl4hgDHQQs4NTQjoHFsAOZZoAX0cND5Gv:QX7tPMK8ctGe4Dzl4h2QnuPs/Zoecv

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\1724650026a8e1ceb70062c09b0b3670a151d1ee2d8f06529a99d8a5702de685ec04134c58970.exe
    "C:\Users\Admin\AppData\Local\Temp\1724650026a8e1ceb70062c09b0b3670a151d1ee2d8f06529a99d8a5702de685ec04134c58970.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of SetWindowsHookEx
    PID:4304

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\ProgramData\remcos\logs.dat

    Filesize

    144B

    MD5

    b64cdf83c70be617c3368e91d6a4d7fe

    SHA1

    a6b354603ef2132e8fe6907abe4ad8b3ad69773e

    SHA256

    053fa85e649a86398ed21b7ae252368025bfa656974bfadbca245a6adc033cb7

    SHA512

    0a6580cc3d5b0ddebcb78eca5e6e949fed99f5a011f3b5145bd09f5f0736db56647fd84c4806b703f873eb5dff1e2e7dca81da58eda4eda93b434badfc3d3e07