Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
94s -
max time network
96s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
09/10/2024, 00:53
Static task
static1
Behavioral task
behavioral1
Sample
abceeff5a724b3e2123791ff4a4175531f889a0be2f2307b2dff362faa3d5c7aN.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
abceeff5a724b3e2123791ff4a4175531f889a0be2f2307b2dff362faa3d5c7aN.exe
Resource
win10v2004-20241007-en
General
-
Target
abceeff5a724b3e2123791ff4a4175531f889a0be2f2307b2dff362faa3d5c7aN.exe
-
Size
895KB
-
MD5
62c2e0c1d25647b05513cd45670f8a90
-
SHA1
e6d17d4f7f40e05b40727451203a2b94b0ead9ef
-
SHA256
abceeff5a724b3e2123791ff4a4175531f889a0be2f2307b2dff362faa3d5c7a
-
SHA512
dcd4132c3fa6ea870c85fda93ee0b9a4983aaad272d5f43571c56a2c3879069562f7cf3a3dd4ee15b5f024e62e4d013d49566dc453f3f7faba4954d5c98db121
-
SSDEEP
12288:4szQR6O38Z9k3sBfqEt4mrfUc8JENpKoYzO8lXKObEO1DucA5qser7+Z/tdVoQRX:4sWFcl4m7US8l6ub1Rgy+ZtpX
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language abceeff5a724b3e2123791ff4a4175531f889a0be2f2307b2dff362faa3d5c7aN.exe