Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Resubmissions
21/09/2024, 10:19
240921-mcrnkaxbpa 321/09/2024, 10:18
240921-mb4azaxble 321/09/2024, 09:56
240921-lytjlsweka 10Analysis
-
max time kernel
25s -
max time network
27s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
21/09/2024, 10:19
Static task
static1
Behavioral task
behavioral1
Sample
ef8bef7d1a8ae3ba7e8eb587d183c880_JaffaCakes118.eml
Resource
win10v2004-20240802-en
Behavioral task
behavioral2
Sample
MV Medi Aero IMO NO 9708966 00877 -xlxs.zip
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
MV Medi Aero IMO NO 9708966 00877 -xlxs.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral4
Sample
email-html-1.txt
Resource
win10v2004-20240910-en
General
-
Target
MV Medi Aero IMO NO 9708966 00877 -xlxs.exe
-
Size
434KB
-
MD5
fe42b52214d984619bf7c42d73bc7980
-
SHA1
4dd5052bbfcb6d37a636decae1d8bc03f5c355a7
-
SHA256
98a050f19567bb930538a9656904f62036a9bee4f3f08c24463d6777cd87eabf
-
SHA512
1f1ddf27221adff8884c239c85c35e8c1d2a0acefe7569bb4a1f7fa1815e37c095b5108a4fed08f465a99e593eaa8d0883af2946c4f531a57d5203f5ccc296d6
-
SSDEEP
12288:sYKYjP6eP97rBuR0IXXp2ExYu3fOzVaoXXl8EkZO:d3jP6+7ronpJr3fQVNn
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language MV Medi Aero IMO NO 9708966 00877 -xlxs.exe