Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    149s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    17/01/2025, 10:25

General

  • Target

    fuck.exe

  • Size

    481KB

  • MD5

    7163fe5f3a7bcfdeec9a07137838012a

  • SHA1

    3bd90557615ef95e4244bdbaa8e0e7fd949cdd3a

  • SHA256

    5433726d3912a95552d16b72366eae777f5f34587e1bdaa0c518c5fcbc3d8506

  • SHA512

    ea6d91205ed0d53868f44077e1d6db3bf8d6e3607378be22e643df3777120aa36d53e39748e4220dbf1d3355a0b791b9a3e5ddc080018d169c81d7ce0afb6478

  • SSDEEP

    12288:z13ak/mBXTG4/1v08KI7ZnMEF76JqmsvZQqS:5ak/mBXTV/R0nEF76gFZJ

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\fuck.exe
    "C:\Users\Admin\AppData\Local\Temp\fuck.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of SetWindowsHookEx
    PID:4900

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\ProgramData\rostad\logs.dat

    Filesize

    184B

    MD5

    6ced7d4052bccdd4997f8c76bfc601c0

    SHA1

    32a2e8bc4140168399ecb93119baf989b7aa3a69

    SHA256

    5f5796507cdf3766457a3c994c906abac3e1e3f9bf8753fb8d5fa0511ba0eb36

    SHA512

    b18c724c04e078549fb6a006c472b282df14e97e4c218732781f8e6c2c7d06dd8a2c6e6d6857e1063ccf075b0be88e91b21e8e02edd42c621fcc944031df56f4