Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    95s
  • max time network
    96s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    13/10/2024, 13:36

General

  • Target

    6ed37f5f681af30d6ddc45665c757e0a610029ab9e1f2f9d3a7b6af1ffea4efeN.exe

  • Size

    1.3MB

  • MD5

    6cb9c862cdfc0f3097419b2d1e1169f0

  • SHA1

    44c9947c7ceceed0c6a868946ffcc50c76aebefb

  • SHA256

    6ed37f5f681af30d6ddc45665c757e0a610029ab9e1f2f9d3a7b6af1ffea4efe

  • SHA512

    8536f4b81c7fa3a36421c00b9dec1c266fc0782fa81ca2b8c3ac1c400adfae96548897908f1409c613e628fee898a4e2d6c7cb98145abf4ec93e233aa85502f1

  • SSDEEP

    12288:OneQCKM1OQsMTmkJR4Do07Y86gw5CtCjX+NLuFhNpBeZT3X:ZVKcOgSkQ/7Gb8NLEbeZ

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\6ed37f5f681af30d6ddc45665c757e0a610029ab9e1f2f9d3a7b6af1ffea4efeN.exe
    "C:\Users\Admin\AppData\Local\Temp\6ed37f5f681af30d6ddc45665c757e0a610029ab9e1f2f9d3a7b6af1ffea4efeN.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:1196

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1196-0-0x0000000000400000-0x0000000000552000-memory.dmp

    Filesize

    1.3MB

  • memory/1196-1-0x0000000000400000-0x0000000000552000-memory.dmp

    Filesize

    1.3MB