Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

15/09/2024, 23:12 UTC

240915-27aqvsxhjq 8

15/09/2024, 23:02 UTC

240915-21efgaxake 8

15/09/2024, 22:58 UTC

240915-2xypyaxdkj 3

15/09/2024, 22:56 UTC

240915-2wn44sxcpk 3

15/09/2024, 22:43 UTC

240915-2np2fawhpr 3

15/09/2024, 22:42 UTC

240915-2m3k5swhmk 10

15/09/2024, 22:33 UTC

240915-2gqdmawbja 8

15/09/2024, 22:27 UTC

240915-2de4gswekk 7

15/09/2024, 22:15 UTC

240915-16esravenh 10

Analysis

  • max time kernel
    1791s
  • max time network
    1566s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    15/09/2024, 22:42 UTC

General

  • Target

    eeeeeeeeeeeeee/Malware_pack_2/Malware_pack_2/DesktopPuzzle/Endermanch@DesktopPuzzle.exe

  • Size

    239KB

  • MD5

    2f8f6e90ca211d7ef5f6cf3c995a40e7

  • SHA1

    f8940f280c81273b11a20d4bfb43715155f6e122

  • SHA256

    1f5a26f24a2bfdd301008f0cc51a6c3762f41b926f974c814f1ecaa4cb28e5e6

  • SHA512

    2b38475550edee5519e33bd18fea510ad73345a27c20f6457710498d34e3d0cf05b0f96f32d018e7dc154a6f2232ea7e3145fd0ed5fb498f9e4702a4be1bb9c8

  • SSDEEP

    3072:r/3qftCdbSFtY8Zf8pOk0rHitNWIekbnfFPsr24Cv/Eng9m3ihlCeKH6Fb6aX3WA:WoI/rC0k7ar68nimCYHe3qZr0SlC

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious use of FindShellTrayWindow 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\eeeeeeeeeeeeee\Malware_pack_2\Malware_pack_2\DesktopPuzzle\Endermanch@DesktopPuzzle.exe
    "C:\Users\Admin\AppData\Local\Temp\eeeeeeeeeeeeee\Malware_pack_2\Malware_pack_2\DesktopPuzzle\Endermanch@DesktopPuzzle.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of FindShellTrayWindow
    PID:2984

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2984-0-0x0000000000220000-0x0000000000221000-memory.dmp

    Filesize

    4KB

  • memory/2984-1-0x0000000000400000-0x0000000000441000-memory.dmp

    Filesize

    260KB

  • memory/2984-2-0x0000000000220000-0x0000000000221000-memory.dmp

    Filesize

    4KB

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.