Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    94s
  • max time network
    95s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20250217-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20250217-enlocale:en-usos:windows10-2004-x64system
  • submitted
    24/02/2025, 18:16

General

  • Target

    2912d61c8089d8b1ff37916c6bb6215d5c6a225f5b7890807bfc12756aba29adN.exe

  • Size

    190KB

  • MD5

    ffab82dce8027f2c430a421e5df6b9e0

  • SHA1

    37765cd8aec52f489afdaa1d52132b6e741988a2

  • SHA256

    2912d61c8089d8b1ff37916c6bb6215d5c6a225f5b7890807bfc12756aba29ad

  • SHA512

    023080d2ab1591d3c76dd86581937ecba3b09e622ef106e6f9e43c10666843591bc76c48bce3cfe6789a62161d31619eb99bdc92b25eca2a67c73a85a33f9698

  • SSDEEP

    3072:ONxCbB1RdMho4wV6Kz68Xn9PjRv5AsbmhB5epRAhogQGWQcdkXu7F6jjD:4xoH/6Kz6Gn5j/XbsB5eah4GzeFaP

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2912d61c8089d8b1ff37916c6bb6215d5c6a225f5b7890807bfc12756aba29adN.exe
    "C:\Users\Admin\AppData\Local\Temp\2912d61c8089d8b1ff37916c6bb6215d5c6a225f5b7890807bfc12756aba29adN.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of SetWindowsHookEx
    PID:3060

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads