Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
110s -
max time network
100s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
02/10/2024, 09:21
Behavioral task
behavioral1
Sample
1fe63bc14837f7e37936df8ca0c0b6d5597e6fcf02ac56a363ce6702cd962a4aN.exe
Resource
win7-20240903-en
General
-
Target
1fe63bc14837f7e37936df8ca0c0b6d5597e6fcf02ac56a363ce6702cd962a4aN.exe
-
Size
83KB
-
MD5
b31c8ee3a9fc1324963c1cadb0e7ac20
-
SHA1
54e4270870a9b572849c31d7157f22e2c29331b8
-
SHA256
1fe63bc14837f7e37936df8ca0c0b6d5597e6fcf02ac56a363ce6702cd962a4a
-
SHA512
c8105f702e3cb44b416f95a67daf2288df4291bf1ed72a1287123038f1ca2d467c71d34768e47efe77422fa81a03c0baaa729d28aab2307cadc1bcd735d7266f
-
SSDEEP
1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+0K:LJ0TAz6Mte4A+aaZx8EnCGVu0
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/3172-0-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/3172-1-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/3172-4-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/3172-8-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/files/0x00080000000234d4-11.dat upx behavioral2/memory/3172-13-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/3172-21-0x0000000000400000-0x000000000042A000-memory.dmp upx -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 1fe63bc14837f7e37936df8ca0c0b6d5597e6fcf02ac56a363ce6702cd962a4aN.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
83KB
MD5bd7d0084e3865689a166eba59c6dc9f4
SHA1cb1ef21897d3214d9e77cfa37e74b0adb061dc0a
SHA256246c80292ce6dba9134591bb87c10a27654245426b4dfb4906a5d47a77c33cf8
SHA5122780689419aeca19641bbaf2a673702b12976ababca8644d652622a339ea317bc1723c467b5e9ab9feb120de2809d55d0a9de5d67215d71590acaf167867f4fd