Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
06/09/2024, 07:20 UTC
General
-
Target
象棋名手3.26版本32位六核核破解版/象棋名手.exe
-
Size
7.3MB
-
MD5
9b101825f8c1d61daa10abd7dccebe1a
-
SHA1
e909e6c10dcd71b05f1c4c1e2cf091ee91390c9a
-
SHA256
585f7c3c26ba76aee811a5dbaa1a83c0a6b96e30223c677a895ba813eeb272af
-
SHA512
e4450cfe66ab318ef7e75aafd7075160e458f2cb3138477c1815c9734b404bc342415f99b71ba609790a9a5e753961d302851746297d26b19847a9183cbee973
-
SSDEEP
98304:Qr/zstOFQA9TBPn+sk9b5Tt492YLFCj9KfXeNL6OadTx6GRvq8LY:Qr/zstOFZBxk9d+FRlfu5FadABS
Score
5/10
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 7 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\象棋名手3.26版本32位六核核破解版\象棋名手.exe"C:\Users\Admin\AppData\Local\Temp\象棋名手3.26版本32位六核核破解版\象棋名手.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
15.1MB
-
Filesize
4KB
-
Filesize
4KB