Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
96s -
max time network
126s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
08/09/2024, 21:17
Static task
static1
Behavioral task
behavioral1
Sample
43723848dfc0dc8b8a50e5823ec9ba8f35f3575aa95dd422e16905473499c31c.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
43723848dfc0dc8b8a50e5823ec9ba8f35f3575aa95dd422e16905473499c31c.exe
Resource
win10v2004-20240802-en
General
-
Target
43723848dfc0dc8b8a50e5823ec9ba8f35f3575aa95dd422e16905473499c31c.exe
-
Size
309KB
-
MD5
be9e7cdc7ff0be568e4766b4facbb3b7
-
SHA1
d27afcbaa331fe00aeeb586139ce120f11c3c085
-
SHA256
43723848dfc0dc8b8a50e5823ec9ba8f35f3575aa95dd422e16905473499c31c
-
SHA512
68824f51dbbb94559b919167ef0e8b5205afe2ecb7580e97205c39383ead370be7d85d0796ae3399f169c8dba6c9a9d2ecc87a3484b013859ddc1467d60adf89
-
SSDEEP
6144:5fZYfFUDjGJYcEzLxpqj5Um2Qa6ll9KTmmJc/QNM6MDu7o5G4P5Fyy4kMsE2yo:Fc/Q+7rL5FMkMsE2p
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 43723848dfc0dc8b8a50e5823ec9ba8f35f3575aa95dd422e16905473499c31c.exe