Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

05/09/2024, 12:03

240905-n7116azfmj 3

05/09/2024, 11:52

240905-n16m3a1bnd 3

Analysis

  • max time kernel
    430s
  • max time network
    1151s
  • platform
    windows11-21h2_x64
  • resource
    win11-20240802-en
  • resource tags

    arch:x64arch:x86image:win11-20240802-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    05/09/2024, 11:52

General

  • Target

    Crypto-Wallets-Scanner-V1.0.5/Crypto_Wallets_Scanner.exe

  • Size

    220KB

  • MD5

    c222b31a42ef8801355a1c6b271a1b16

  • SHA1

    7ec99b3abaa189f05f93d7fc6ee40507b2d3177a

  • SHA256

    92b5e826d98f6cb1ee8990267819bfe7abc59db62ce861798bf2d8b56217727c

  • SHA512

    4a94b219e0c6648c9edc089b1f565af16d8805a4154477392d5235d1b94b8c52a7adaba0c7f8e758a78fd82b59f816484516cca76c9fb6c92f1e79bfeeca9d03

  • SSDEEP

    1536:znVIfBSI6p9nnn4XXXhXUPyHDPtvaF6pHnnn4XXXhXUPrHDPvvvl:znVIfBSI68H7w6bH7N

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\Crypto-Wallets-Scanner-V1.0.5\Crypto_Wallets_Scanner.exe
    "C:\Users\Admin\AppData\Local\Temp\Crypto-Wallets-Scanner-V1.0.5\Crypto_Wallets_Scanner.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:1592

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1592-0-0x000000007441E000-0x000000007441F000-memory.dmp

    Filesize

    4KB

  • memory/1592-1-0x0000000000E30000-0x0000000000E6C000-memory.dmp

    Filesize

    240KB

  • memory/1592-2-0x0000000005D70000-0x0000000006316000-memory.dmp

    Filesize

    5.6MB

  • memory/1592-3-0x0000000005860000-0x00000000058F2000-memory.dmp

    Filesize

    584KB

  • memory/1592-4-0x00000000057F0000-0x00000000057FA000-memory.dmp

    Filesize

    40KB

  • memory/1592-5-0x0000000074410000-0x0000000074BC1000-memory.dmp

    Filesize

    7.7MB

  • memory/1592-6-0x0000000074410000-0x0000000074BC1000-memory.dmp

    Filesize

    7.7MB

  • memory/1592-7-0x000000007441E000-0x000000007441F000-memory.dmp

    Filesize

    4KB

  • memory/1592-8-0x0000000074410000-0x0000000074BC1000-memory.dmp

    Filesize

    7.7MB