Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
93s -
max time network
96s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
28/09/2024, 12:04
Static task
static1
Behavioral task
behavioral1
Sample
wzoptBmp.1.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
wzoptBmp.1.exe
Resource
win10v2004-20240802-en
General
-
Target
wzoptBmp.1.exe
-
Size
313KB
-
MD5
8c6a57551936555b3fdc90562ccb9bf7
-
SHA1
b9597b52dac45c3915c1cb25dfc4226cb57a2c14
-
SHA256
f4af111386d937e7bd64fd304d947b542f44993d8f2f092c0ff2f2b584e18129
-
SHA512
61f30d70947891e42904f796d11612d8a3c263b0f0f7f884867a81c9ba59ec7d0a30f429ffaeaea028ba2b91b798ee3e1f3b3fd6868c8280bd6c00cdf84fa4d6
-
SSDEEP
6144:4jT5Zh17eWxoG/+ov/2OIQ4wW3OBsCeAWIT+tMXY0be:4RZ+IoG/n9IQxW3OBsehT+tF0be
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language wzoptBmp.1.exe