Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
135s -
max time network
146s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
30/12/2023, 02:09
Static task
static1
Behavioral task
behavioral1
Sample
0b2bfc04ca587c56755926f18953cb04.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0b2bfc04ca587c56755926f18953cb04.exe
Resource
win10v2004-20231215-en
General
-
Target
0b2bfc04ca587c56755926f18953cb04.exe
-
Size
46KB
-
MD5
0b2bfc04ca587c56755926f18953cb04
-
SHA1
70ca27612d264fbddb58d0198d79dac943317502
-
SHA256
1444f02b845fd33abb0b161fcacf395bc08c2c51641bc6f8674a8ca9671d894b
-
SHA512
28768087e845865a0022810cc43b6f2ad605f60f674a3a6ae5db0c6beb5d15a830ce478cb1a6a9d2b39cd09bc49bdc659b84f0fa5532dd819a31a25a6758c468
-
SSDEEP
768:gViN7fZkZmYPqQZSB830ywLThT7Es5tPHWgNdxuYScisJC:gVeLPZBIbGhT7zLdx7/U
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 1 IoCs
Looks up country code configured in the registry, likely geofence.
description ioc Process Key value queried \REGISTRY\USER\S-1-5-21-1268429524-3929314613-1992311491-1000\Control Panel\International\Geo\Nation 0b2bfc04ca587c56755926f18953cb04.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of UnmapMainImage 1 IoCs
pid Process 1948 0b2bfc04ca587c56755926f18953cb04.exe