Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
94s -
max time network
95s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
12/09/2024, 04:55
General
-
Target
5d09fa4e35be64aa374c7fb98298ebe4d202196ee30e436a09438b791f73cc20.exe
-
Size
1.4MB
-
MD5
cb6a104fb45c4b835511ba951cbb0618
-
SHA1
863e748c1dc16b4647fd3a15a11c20ce88a71168
-
SHA256
5d09fa4e35be64aa374c7fb98298ebe4d202196ee30e436a09438b791f73cc20
-
SHA512
402e10306575e51c2dd29cbcdce80ab77667583fc24e3b68f10e186c0380d962a928c1a2287f55232fe3b0747da0c353896a70ce72fd22c7b1056e964fa211ee
-
SSDEEP
24576:CYGPyK5sPto/2pEyYLH2/ZnWZpPmvhLWGUE1Ilp90fBBhw4nB1xst4YTSGMD9itR:Cm5Se9ewfYkZLUson
Malware Config
Signatures
-
UPX packed file 3 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of SetWindowsHookEx 5 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\5d09fa4e35be64aa374c7fb98298ebe4d202196ee30e436a09438b791f73cc20.exe"C:\Users\Admin\AppData\Local\Temp\5d09fa4e35be64aa374c7fb98298ebe4d202196ee30e436a09438b791f73cc20.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
96KB
-
Filesize
96KB
-
Filesize
960KB
-
Filesize
960KB
-
Filesize
960KB
-
Filesize
960KB
-
Filesize
960KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
960KB
-
Filesize
960KB
-
Filesize
96KB
-
Filesize
960KB
-
Filesize
960KB
-
Filesize
960KB
-
Filesize
960KB
-
Filesize
960KB
-
Filesize
960KB