Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
115s -
max time network
117s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
09/10/2024, 21:25
Behavioral task
behavioral1
Sample
218be801fa2e1c110185d967000cd26cf5dc26202eccfcb633dda05bd4fd4036N.exe
Resource
win7-20240729-en
General
-
Target
218be801fa2e1c110185d967000cd26cf5dc26202eccfcb633dda05bd4fd4036N.exe
-
Size
236KB
-
MD5
599a6fa37a92fdfcdf3b0296f477cba0
-
SHA1
ec03e60b7747eab6167bf85b6b0997c6301575d8
-
SHA256
218be801fa2e1c110185d967000cd26cf5dc26202eccfcb633dda05bd4fd4036
-
SHA512
3c40a3fc91efbb3e9fbe83f83f855d3d0602c1cf3cc46bbefc1cab7577beb7e5c7691eac2088dbcec23ee11791460eceba927bd721011a1577ed6913112ab8c1
-
SSDEEP
3072:RJ0Bs3o8A4M3riN6MhGkgS3PL6pb9t16n5OkhBOPC/P/FnncroP9:bwDeM7iNEkgiOb31k1ECvJ/F
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/4212-0-0x0000000000400000-0x000000000043B000-memory.dmp upx behavioral2/memory/4212-1-0x0000000000400000-0x000000000043B000-memory.dmp upx behavioral2/files/0x000b000000023b84-6.dat upx -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 218be801fa2e1c110185d967000cd26cf5dc26202eccfcb633dda05bd4fd4036N.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
236KB
MD5bb7171d31b7e1f5520fcafc1d03b8c34
SHA185e23a2eceaeb97137efdbcdfbfd50890eb7d2d4
SHA256efc0a205d6249fb3a26c1a2137d7047a97e059024599a7893bd169f2933ded10
SHA5126a1e23c3d9fd032c0fdd5c8a75cb882a925dd36a450daa308aefbc7a14b3ead08866fcb5dd67ac0ff4fa397cc10de2162083f037a6c069cdf363f8100ebacd33