Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
111s -
max time network
98s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
18/10/2024, 04:47
Behavioral task
behavioral1
Sample
4fa6f79dd3d869c46144647112138e01c9a6b10fcc9613be91ba9e2ae89cd120N.exe
Resource
win7-20240903-en
General
-
Target
4fa6f79dd3d869c46144647112138e01c9a6b10fcc9613be91ba9e2ae89cd120N.exe
-
Size
83KB
-
MD5
ed9c9243ca1a564d3542a47b43df5f50
-
SHA1
f1124247f31494501b877d492ffb12135112ba4e
-
SHA256
4fa6f79dd3d869c46144647112138e01c9a6b10fcc9613be91ba9e2ae89cd120
-
SHA512
79070c5be9f4a2e5ad695042fa8c1c1aa8fbd3d593b2cdc4d73c745e047802648e533336173098d036039f1a6fa1e110e70d4b7116bfff3697e4550d2b73e049
-
SSDEEP
1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+2K:LJ0TAz6Mte4A+aaZx8EnCGVu2
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/820-0-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/820-1-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/820-4-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/820-8-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/files/0x0014000000023a25-12.dat upx behavioral2/memory/820-15-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral2/memory/820-22-0x0000000000400000-0x000000000042A000-memory.dmp upx -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 4fa6f79dd3d869c46144647112138e01c9a6b10fcc9613be91ba9e2ae89cd120N.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
83KB
MD5171ff7d45d89eae5d16c7e1f9901ab78
SHA1074abb0feff19d4ef252460311e7f5d5cf84738b
SHA25614445bd8054421e4957737642e81efc03a1ba7a0f364c3f3b32b657b74c50071
SHA512b4f2a2d8a11f46505c0dbc07505997e2fd310dac04c27e8816a43851dd6a6d6509d4298b4a646f3fd92d1c6232a79389525f161479e6335f70d712b2f61400cb