Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
148s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
24/12/2024, 10:01
Static task
static1
Behavioral task
behavioral1
Sample
һ֪ͨ/list1.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
һ֪ͨ/list1.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
һ֪ͨ/list2.dll
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
һ֪ͨ/list2.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
һ֪ͨ/list3.dll
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
һ֪ͨ/list3.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
һ֪ͨ/һ֪ͨ.exe
Resource
win7-20240708-en
Behavioral task
behavioral8
Sample
һ֪ͨ/һ֪ͨ.exe
Resource
win10v2004-20241007-en
General
-
Target
һ֪ͨ/list1.exe
-
Size
182KB
-
MD5
d9bb1ad1f263e39264dce8526fb3e66b
-
SHA1
a6c36f6da12e5e5be5605e8bcaf95747e8a9f90a
-
SHA256
247945274f09db00ff4469eb1c894bc9579865ec6f76ed207939a5cbc6234b13
-
SHA512
52b800494457cfa12682e72a6ceeca1b8d53a3685897cd5c8303ea4cb95dfdba8fb94125ce3567a64d11758699f3533d0ab1bce8e7d1a05a0a84f5f1a7354c84
-
SSDEEP
3072:jOsrwp/YjykBAkuzbqYjapVqwm4CCFjsXN9/LxF3HHGcP9C2U:Cs0p/6BajmUPCWPv3HrI
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language list1.exe