Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    148s
  • max time network
    140s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    28/11/2024, 19:24

General

  • Target

    7a67aa0f4b0c33b1bd9acf18ea4e96d357e8198c5eaaab2404e9f6802db3fb87.exe

  • Size

    481KB

  • MD5

    f9c6ffd9d3156c7701ddcceb42181ee3

  • SHA1

    210be4e3d3b29cd46b3ace1ce94404451e7fc97c

  • SHA256

    7a67aa0f4b0c33b1bd9acf18ea4e96d357e8198c5eaaab2404e9f6802db3fb87

  • SHA512

    146838fb33b68cb22d77f8c4f91bd47ad1203ba91ff819a6a671a37ef936c7fce445cd82825ac47e601b7a8a1d6fcd045b4b06a2835a8881c7e87307b467a20d

  • SSDEEP

    12288:NuD09AUkNIGBYYv4eK13x13nZHSRVMf139F5wIB7+IwtHwBtVxbesvZDSe+DY:A09AfNIEYsunZvZ19Z9s

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\7a67aa0f4b0c33b1bd9acf18ea4e96d357e8198c5eaaab2404e9f6802db3fb87.exe
    "C:\Users\Admin\AppData\Local\Temp\7a67aa0f4b0c33b1bd9acf18ea4e96d357e8198c5eaaab2404e9f6802db3fb87.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of SetWindowsHookEx
    PID:4064

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\ProgramData\remcos\logs.dat

    Filesize

    144B

    MD5

    4295d2ebab22b870affc7961f414c681

    SHA1

    3f1440a62e9b1e8b4d63f8dca8601658d9619f78

    SHA256

    d72eb0580cf3ef19ea20cd2e1173e52f8d2b23f0988c546139de00745c49877e

    SHA512

    87f2b14e6263a7953c8d3d322328429122063e7afb7999b3d5fef7c5391f7a99ad1762a281cd68fb4edff7a13505a612b6214e344be7e1a99581a947fc2eae1c