Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
141s -
max time network
97s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
03/09/2024, 09:07
General
-
Target
8e2b29a2b052e8cef485a4f588cd943edc7710720bad6be62ee2b7b0e8d50432.exe
-
Size
2.7MB
-
MD5
8fcc178f90e03d430fb903ff5aaa5585
-
SHA1
b7aef8d9b6583db51783a69940ff014e6cff94b9
-
SHA256
8e2b29a2b052e8cef485a4f588cd943edc7710720bad6be62ee2b7b0e8d50432
-
SHA512
4812981af037d6a703fccbb5fc0e95371d942d71c1b04b858a2e9eb1fbcc0d3795ef4002ad9a958be1383e9fdc8ed25b7a826636ed6b226c889f14114caab4c6
-
SSDEEP
49152:IMvNOlJQtju3XaHbSI6icuHVntwv1a38iRvx7SFUgRqfrtjTARI+P5Y:bvNOlJYjuaHbS7kVnKv1i8UQUgurtN+h
Score
5/10
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\8e2b29a2b052e8cef485a4f588cd943edc7710720bad6be62ee2b7b0e8d50432.exe"C:\Users\Admin\AppData\Local\Temp\8e2b29a2b052e8cef485a4f588cd943edc7710720bad6be62ee2b7b0e8d50432.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
11.5MB
-
Filesize
3.8MB
-
Filesize
4KB
-
Filesize
11.5MB
-
Filesize
3.8MB
-
Filesize
4KB