Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
148s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
08/01/2025, 14:39
Behavioral task
behavioral1
Sample
download.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
download.exe
Resource
win10v2004-20241007-en
General
-
Target
download.exe
-
Size
481KB
-
MD5
bc99da46df7a1e46d7d7ae40107b08c1
-
SHA1
ed14378358a8dafd0d8b66120c6b3928be95408f
-
SHA256
ba45d03e6fa3b7d8371ef76140419bf4ddfe1d19bf029829fe518080072d33db
-
SHA512
7adcee93e31c5109eadf0062c9f4544d0569b85c843fccc242433ddd717bae8aaf4aec3831c1f6e8f5dc99127a80cea048ac4ed247e613fb70d95eea2635ffec
-
SSDEEP
12288:P9PgP3HAMwIGjY4vce6lnBthn5HSRVMf139F5woxr+IwtHwBtFhCsvZD5y+P32:N43HfwIGYMcn5PJrZQ+
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language download.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2252 download.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
144B
MD53c9302eb831db1607743b60d870fc67f
SHA151e5fddb4f814a87f945eb2e4a9227ba880159d3
SHA256f19cedf930d5485bb29890702067d4717dcc0bd594284e0546dae8dfd50ce6d9
SHA5125868bfa5004bf3059a37dbdad05e7f636c3e58ccb0339b6cec11fccc82b37ae3c4d84365e04a60bdb9591d4b2208125c7b0605564af830c1c3a07bed164303a1