Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
94s -
max time network
95s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
19/09/2024, 19:56
General
-
Target
3c5b43178c1aa66eb1bbbaf1c41c41751f79db3e8eb6a484d7460eacb8d9c0dd.exe
-
Size
206KB
-
MD5
4522ec240b2d823c71142c3d04858255
-
SHA1
72b259d507852adcd3014c25d62403bf2b1686b6
-
SHA256
3c5b43178c1aa66eb1bbbaf1c41c41751f79db3e8eb6a484d7460eacb8d9c0dd
-
SHA512
1830187f4236dfbab74e2e667128fa8508b67afe6d20be1d9ebfe13e80dee4bb527711c7b44ad13e31b13e98a4a1e7dcb18007d3688af38d757d29f456863c19
-
SSDEEP
6144:0Xv5sEN8fhKznU07UO70fUdPse0qh5gFNRFWopD55whIu:0f5szZOUDToPVX56RF/DHwhH
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\3c5b43178c1aa66eb1bbbaf1c41c41751f79db3e8eb6a484d7460eacb8d9c0dd.exe"C:\Users\Admin\AppData\Local\Temp\3c5b43178c1aa66eb1bbbaf1c41c41751f79db3e8eb6a484d7460eacb8d9c0dd.exe"1⤵
- System Location Discovery: System Language Discovery