Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    95s
  • max time network
    99s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11/09/2024, 03:55

General

  • Target

    808fd28dfd92512974409a3a5e094d50N.exe

  • Size

    9.0MB

  • MD5

    808fd28dfd92512974409a3a5e094d50

  • SHA1

    9c51b9a1f703545b8cb2d5faa312c2c29fa664a1

  • SHA256

    276c774164e58f2a9a22e776524ac519be85cee091c7459480b7cf89206f506d

  • SHA512

    bf7edf1e656de17fc2421c39b153087e7619f595bbaf267fc807982a6d21ef2b9d6807529e94c6d951db9be1b0f26e145aa69b55dba2b86f113bdf3afe664d26

  • SSDEEP

    196608:o+Ap6xjY5x/4PouN050h5SgWKgT53PZ0xBHKWlqbuteINO3k95BK4a:VKEM5p4guuWrSgDwPZ8qsmk9G

Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\808fd28dfd92512974409a3a5e094d50N.exe
    "C:\Users\Admin\AppData\Local\Temp\808fd28dfd92512974409a3a5e094d50N.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:4692

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads