Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
6Static
static
3docsis_cfg...54.exe
windows7-x64
3docsis_cfg...54.exe
windows10-2004-x64
3Tality54.exe
windows7-x64
3Tality54.exe
windows10-2004-x64
3docsis_cfg...bs.url
windows7-x64
6docsis_cfg...bs.url
windows10-2004-x64
3docsis_cfg....7.dll
windows7-x64
3docsis_cfg....7.dll
windows10-2004-x64
3docsis_cfg...n1.dll
windows7-x64
3docsis_cfg...n1.dll
windows10-2004-x64
3docsis_cfg...t.html
windows7-x64
3docsis_cfg...t.html
windows10-2004-x64
3docsis_cfg...s.html
windows7-x64
3docsis_cfg...s.html
windows10-2004-x64
3docsis_cfg...x.html
windows7-x64
3docsis_cfg...x.html
windows10-2004-x64
3docsis_cfg...is.bat
windows7-x64
1docsis_cfg...is.bat
windows10-2004-x64
3docsis_cfg...is.exe
windows7-x64
1docsis_cfg...is.exe
windows10-2004-x64
3docsis_cfg...is.url
windows7-x64
6docsis_cfg...is.url
windows10-2004-x64
3docsis_cfg...fg.exe
windows7-x64
3docsis_cfg...fg.exe
windows10-2004-x64
3snmp/mibs/...mt.vbs
windows7-x64
1snmp/mibs/...mt.vbs
windows10-2004-x64
1snmp/mibs/cap.vbs
windows7-x64
1snmp/mibs/cap.vbs
windows10-2004-x64
1snmp/mibs/...IB.vbs
windows7-x64
1snmp/mibs/...IB.vbs
windows10-2004-x64
1snmp/mibs/...IB.vbs
windows7-x64
1snmp/mibs/...IB.vbs
windows10-2004-x64
1Analysis
-
max time kernel
140s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
29/09/2024, 05:16
Static task
static1
Behavioral task
behavioral1
Sample
docsis_cfg2.0.7/Tality54.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
docsis_cfg2.0.7/Tality54.exe
Resource
win10v2004-20240910-en
Behavioral task
behavioral3
Sample
Tality54.exe
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
Tality54.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
docsis_cfg2.0.7/cablelabs.url
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
docsis_cfg2.0.7/cablelabs.url
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
docsis_cfg2.0.7/cygcrypto-0.9.7.dll
Resource
win7-20240708-en
Behavioral task
behavioral8
Sample
docsis_cfg2.0.7/cygcrypto-0.9.7.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
docsis_cfg2.0.7/cygwin1.dll
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
docsis_cfg2.0.7/cygwin1.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
docsis_cfg2.0.7/doc/config-format.html
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
docsis_cfg2.0.7/doc/config-format.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
docsis_cfg2.0.7/doc/config-settings.html
Resource
win7-20240708-en
Behavioral task
behavioral14
Sample
docsis_cfg2.0.7/doc/config-settings.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
docsis_cfg2.0.7/doc/index.html
Resource
win7-20240708-en
Behavioral task
behavioral16
Sample
docsis_cfg2.0.7/doc/index.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
docsis_cfg2.0.7/docsis.bat
Resource
win7-20240903-en
Behavioral task
behavioral18
Sample
docsis_cfg2.0.7/docsis.bat
Resource
win10v2004-20240910-en
Behavioral task
behavioral19
Sample
docsis_cfg2.0.7/docsis.exe
Resource
win7-20240704-en
Behavioral task
behavioral20
Sample
docsis_cfg2.0.7/docsis.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
docsis_cfg2.0.7/docsis.url
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
docsis_cfg2.0.7/docsis.url
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
docsis_cfg2.0.7/docsis_cfg.exe
Resource
win7-20240903-en
Behavioral task
behavioral24
Sample
docsis_cfg2.0.7/docsis_cfg.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
snmp/mibs/brcm-80211-mgmt.vbs
Resource
win7-20240903-en
Behavioral task
behavioral26
Sample
snmp/mibs/brcm-80211-mgmt.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
snmp/mibs/cap.vbs
Resource
win7-20240903-en
Behavioral task
behavioral28
Sample
snmp/mibs/cap.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
snmp/mibs/ietf/AGGREGATE-MIB.vbs
Resource
win7-20240903-en
Behavioral task
behavioral30
Sample
snmp/mibs/ietf/AGGREGATE-MIB.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
snmp/mibs/ietf/DISMAN-EVENT-MIB.vbs
Resource
win7-20240903-en
Behavioral task
behavioral32
Sample
snmp/mibs/ietf/DISMAN-EVENT-MIB.vbs
Resource
win10v2004-20240802-en
General
-
Target
Tality54.exe
-
Size
1.3MB
-
MD5
e8bde603a6837246c1dc0ea22b6623f1
-
SHA1
f28ef66b0529ce5f71beb81be55d65d225d01ceb
-
SHA256
65b6d5e8dfbfcb856c0d7d33f2d5f273269afc37e0f8a59320f2e17313ba528f
-
SHA512
9cfd032bc675a65585392676a4de8b67cf15e2698abc1b79c8a15f47f962b4d3299ec964114c849baeb00e4a9ad493f6bc7d493b2ce9a5046034d740d52c74ea
-
SSDEEP
24576:21Q2ncWj8xbWO0kiYeljTsywlOLH+6BjEmkRTYddKB:lijTsywlOBBEmuTYfKB
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Tality54.exe