Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
105s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
19/09/2024, 18:19
Static task
static1
Behavioral task
behavioral1
Sample
75a9b201adc5137eceb208a6d83b3269a28ef62ef0e14be3ed56cdeb4d482b95.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
75a9b201adc5137eceb208a6d83b3269a28ef62ef0e14be3ed56cdeb4d482b95.exe
Resource
win10v2004-20240802-en
General
-
Target
75a9b201adc5137eceb208a6d83b3269a28ef62ef0e14be3ed56cdeb4d482b95.exe
-
Size
4.8MB
-
MD5
713ea4bb95c57f78dd35779bbdf45772
-
SHA1
aeeb9b0006b0bffff866bcd93c55b0c030563905
-
SHA256
75a9b201adc5137eceb208a6d83b3269a28ef62ef0e14be3ed56cdeb4d482b95
-
SHA512
5c1f8fcafcbdc51b20ee5b32d0d701106fa198efa007e001903b2c37d66c962e4e97258ef03cec48030b6340eb2d9ae4ac379f77a8349af1e0c2294405c8a9af
-
SSDEEP
98304:ob3+1h/GnIqmSqkBcs6ieFNO6lB/jYU4p6meqQC94CF8:eu7/GVCZKk94pkC9zy
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 75a9b201adc5137eceb208a6d83b3269a28ef62ef0e14be3ed56cdeb4d482b95.exe