Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    148s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    09/01/2025, 02:27

General

  • Target

    63f66c8c25bd326511fed28aaf214e602c85c2f7793a47cfd5e0f38842a6b86d.exe

  • Size

    481KB

  • MD5

    3b2dfefa045f3257002ad8313e5d9db2

  • SHA1

    48b70b309dc15e419112e09c48c93145b6634019

  • SHA256

    63f66c8c25bd326511fed28aaf214e602c85c2f7793a47cfd5e0f38842a6b86d

  • SHA512

    ada39e1f3cba0c6307062eaeebd1b9ac53d57ee5195ba1c645f3d4b03dc3cb1e24c0c4dfc9a7d4e042981cd5561f9a5a2b55ad3e5df9b4efa74cf7e5eedea58a

  • SSDEEP

    12288:L9PgP3HAMwIGjY4vce6lnBthn5HSRVMf139F5woxr+IwtHwBtFhCsvZD5W+P32:Z43HfwIGYMcn5PJrZw+

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\63f66c8c25bd326511fed28aaf214e602c85c2f7793a47cfd5e0f38842a6b86d.exe
    "C:\Users\Admin\AppData\Local\Temp\63f66c8c25bd326511fed28aaf214e602c85c2f7793a47cfd5e0f38842a6b86d.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of SetWindowsHookEx
    PID:4260

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\ProgramData\remcos\logs.dat

    Filesize

    144B

    MD5

    158cf595ee0638f06be1e0ca44b9405e

    SHA1

    59348993fc0789f88e44925e04ef24feeb165fd1

    SHA256

    e12ebfaa0ac5365b39335a6f92dc7ab470a332763bec26cca19408925bb4ac16

    SHA512

    2a85a06376605023a9e26e694e41bd7da1af46c1a335039b3dca89ca28d445c14cc9cec6c2f9326ab4df7221914030c007a0c470d75080f460a8a41d0b5cf99b