Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
93s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
09/09/2024, 04:45
General
-
Target
时空的WPEcngr/时空的WPE-v1.2.exe
-
Size
896KB
-
MD5
6ba08b0bc88320c71790c5965a5f3c8c
-
SHA1
486602f057c11ce0bc959415f8aef3f1ee850854
-
SHA256
4416e6197026880aefbe7ec12d3f6826fe97f4e3d1c675dff9d38a34197c11ff
-
SHA512
4bed28b6064cb5e05d0b786a786568d838f3c820066887245a226e89f5ec5fa30039802eb8952c52245fb4d2679fa87254d19ade4c789af7e4439b37c98c6758
-
SSDEEP
12288:q+WIR1yKz/A3HEkv/cPENlkGpwUBrqgvExYR5nWFpPoShw+TN:5WIaKz/aHzvCENlNqQk7bM+h
Malware Config
Signatures
-
UPX packed file 27 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of SetWindowsHookEx 5 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\时空的WPEcngr\时空的WPE-v1.2.exe"C:\Users\Admin\AppData\Local\Temp\时空的WPEcngr\时空的WPE-v1.2.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB