Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240729-en -
resource tags
arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system -
submitted
09/08/2024, 15:03
Static task
static1
Behavioral task
behavioral1
Sample
22f1fe5f2c1434b9e0f836c57d600ad7303ddf96aed0708d3b1a1936e546fdcd.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
22f1fe5f2c1434b9e0f836c57d600ad7303ddf96aed0708d3b1a1936e546fdcd.exe
Resource
win10v2004-20240802-en
General
-
Target
22f1fe5f2c1434b9e0f836c57d600ad7303ddf96aed0708d3b1a1936e546fdcd.exe
-
Size
392KB
-
MD5
78fa529563a8feab86675071536f8ae7
-
SHA1
6b88810000d2376263f0ad8d88c8d5ffd646aece
-
SHA256
22f1fe5f2c1434b9e0f836c57d600ad7303ddf96aed0708d3b1a1936e546fdcd
-
SHA512
10bbcf87f9fbb11895ee5dbd576b21a27ff972875af5b36d711f89fe945621cf5ecd6038a99f5e7a36dc53a8d9ee508671ddf325d068676e91c2931c90becb46
-
SSDEEP
6144:r1yF0VTseBPO7xBG37L210AdaHUUtnBUjGNY5MnRhCFSEVl:wFUOVB67Li0euUUbjhCZr
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 22f1fe5f2c1434b9e0f836c57d600ad7303ddf96aed0708d3b1a1936e546fdcd.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2232 22f1fe5f2c1434b9e0f836c57d600ad7303ddf96aed0708d3b1a1936e546fdcd.exe 2232 22f1fe5f2c1434b9e0f836c57d600ad7303ddf96aed0708d3b1a1936e546fdcd.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\22f1fe5f2c1434b9e0f836c57d600ad7303ddf96aed0708d3b1a1936e546fdcd.exe"C:\Users\Admin\AppData\Local\Temp\22f1fe5f2c1434b9e0f836c57d600ad7303ddf96aed0708d3b1a1936e546fdcd.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:2232