Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
92s -
max time network
100s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
04/10/2024, 18:48
General
-
Target
97bcc2fc0a5d2b093846b75b9ceb4af19a06f1beb638fd4cd43f1938a7a9a16eN.exe
-
Size
1022KB
-
MD5
fecd29c5930d1d7c9ed12f74c0f301c0
-
SHA1
2c8d2d0a1302d36cd26434ad6af101d7b26b1757
-
SHA256
97bcc2fc0a5d2b093846b75b9ceb4af19a06f1beb638fd4cd43f1938a7a9a16e
-
SHA512
fa7dd3579efeb1d0a345ba014ba6a25029a0e9aabe96adbe21dd7d6c759eddbdf21adf30a9632330182635293b43fdb7d3b3e2bdf35284613e6241196b518ffc
-
SSDEEP
24576:S9INUOL+wEGGDxM9Be+KeGTWg2yU2UFvv+d+c:S92UOL+wETFM9wZIghUNmkc
Score
6/10
Malware Config
Signatures
-
Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\97bcc2fc0a5d2b093846b75b9ceb4af19a06f1beb638fd4cd43f1938a7a9a16eN.exe"C:\Users\Admin\AppData\Local\Temp\97bcc2fc0a5d2b093846b75b9ceb4af19a06f1beb638fd4cd43f1938a7a9a16eN.exe"1⤵
- Writes to the Master Boot Record (MBR)
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx