Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    96s
  • max time network
    103s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    28/09/2024, 03:51

General

  • Target

    645d028637e832e84aa7cc9eb424cdc2bbf57a3f51e61f63134a86c3f4ff0bbeN.exe

  • Size

    468KB

  • MD5

    f8271b5530f8fe9a190d25531b82b5b0

  • SHA1

    b78708546cd3b3a4a9c6cad5301ae89c57948d85

  • SHA256

    645d028637e832e84aa7cc9eb424cdc2bbf57a3f51e61f63134a86c3f4ff0bbe

  • SHA512

    9aa30e69755d4694043e12841f7e790a842753d538a7ae47e02815d3bcf11dd09c583992022baafdd529a04993710dbead289f91a9ce3c60ca62c1591789711b

  • SSDEEP

    3072:VFmnogBRjf8c2bYyPx3y6f8/fCbZyFp0PmHw5T3+hfx+gsLzs9lP:VFWoikc2pPZy6feDIohfEFLzs

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\645d028637e832e84aa7cc9eb424cdc2bbf57a3f51e61f63134a86c3f4ff0bbeN.exe
    "C:\Users\Admin\AppData\Local\Temp\645d028637e832e84aa7cc9eb424cdc2bbf57a3f51e61f63134a86c3f4ff0bbeN.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:620

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/620-0-0x0000000000400000-0x0000000000475000-memory.dmp

    Filesize

    468KB

  • memory/620-1-0x0000000000400000-0x0000000000475000-memory.dmp

    Filesize

    468KB