Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    1466s
  • max time network
    1491s
  • platform
    windows11-21h2_x64
  • resource
    win11-20241007-en
  • resource tags

    arch:x64arch:x86image:win11-20241007-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    13/10/2024, 01:13

General

  • Target

    BpmSyncVmdGenerator/Adobe AIR/Versions/1.0/Resources/CaptiveAppEntry.exe

  • Size

    61KB

  • MD5

    6a82a0e0346e246ee54ed0189e260133

  • SHA1

    63ce76ffad76c712b1edeb08f9a54894c56ba3d5

  • SHA256

    400f508ea87206b43c7ccce6a2cf3098973e7416f821ea4a773cf11fe3251c1f

  • SHA512

    9fa85e79421d22cbcbefcfc3088aa352a65ff3ad32dfbb66d64ce27822dfd3ecc0d81ef012251e072e2757f51d8b25550c0335e209e4800fe855db34690c0520

  • SSDEEP

    768:dzlxKPeCUtvjrkEugy9wlCxWc8aClPq5QDs/Du6tSUh475ElkKhJ/H:ZvKpK/y9wExDOP8Q45SH5ElkmJ

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\BpmSyncVmdGenerator\Adobe AIR\Versions\1.0\Resources\CaptiveAppEntry.exe
    "C:\Users\Admin\AppData\Local\Temp\BpmSyncVmdGenerator\Adobe AIR\Versions\1.0\Resources\CaptiveAppEntry.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:3872

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads