Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
149s -
max time network
157s -
platform
windows10-2004_x64 -
resource
win10v2004-20240910-en -
resource tags
arch:x64arch:x86image:win10v2004-20240910-enlocale:en-usos:windows10-2004-x64system -
submitted
14/09/2024, 21:36
Static task
static1
Behavioral task
behavioral1
Sample
5bbc75fad736ee45f0788fb3cb90a23c2cc28e8b05f01e01e84ad4b667a4aefb.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
5bbc75fad736ee45f0788fb3cb90a23c2cc28e8b05f01e01e84ad4b667a4aefb.exe
Resource
win10v2004-20240910-en
General
-
Target
5bbc75fad736ee45f0788fb3cb90a23c2cc28e8b05f01e01e84ad4b667a4aefb.exe
-
Size
57KB
-
MD5
6690f31fb29092e568c24773eec11dd2
-
SHA1
9db318f5e65e673ff1adcf679f21ee302e02541e
-
SHA256
5bbc75fad736ee45f0788fb3cb90a23c2cc28e8b05f01e01e84ad4b667a4aefb
-
SHA512
e532fddcbb2ffb4a419ba2d2a9ac081eb930d70db7a89fdb33bed64a9b4df91848a0e64b98a4e995c9b0804f1a5cbe58a06b57e268be0f60270a5b5dcbd87604
-
SSDEEP
768:W7BlpppARFbhjbhg42LcfpR42LcfproFNFDqcjO/g/++:W7ZppApBULcfpHLcfpyDPjv++
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 5bbc75fad736ee45f0788fb3cb90a23c2cc28e8b05f01e01e84ad4b667a4aefb.exe