Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
17/01/2025, 10:25
Behavioral task
behavioral1
Sample
fuck.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
fuck.exe
Resource
win10v2004-20241007-en
General
-
Target
fuck.exe
-
Size
481KB
-
MD5
7163fe5f3a7bcfdeec9a07137838012a
-
SHA1
3bd90557615ef95e4244bdbaa8e0e7fd949cdd3a
-
SHA256
5433726d3912a95552d16b72366eae777f5f34587e1bdaa0c518c5fcbc3d8506
-
SHA512
ea6d91205ed0d53868f44077e1d6db3bf8d6e3607378be22e643df3777120aa36d53e39748e4220dbf1d3355a0b791b9a3e5ddc080018d169c81d7ce0afb6478
-
SSDEEP
12288:z13ak/mBXTG4/1v08KI7ZnMEF76JqmsvZQqS:5ak/mBXTV/R0nEF76gFZJ
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language fuck.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4900 fuck.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
184B
MD56ced7d4052bccdd4997f8c76bfc601c0
SHA132a2e8bc4140168399ecb93119baf989b7aa3a69
SHA2565f5796507cdf3766457a3c994c906abac3e1e3f9bf8753fb8d5fa0511ba0eb36
SHA512b18c724c04e078549fb6a006c472b282df14e97e4c218732781f8e6c2c7d06dd8a2c6e6d6857e1063ccf075b0be88e91b21e8e02edd42c621fcc944031df56f4