Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
91s -
max time network
98s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
17/08/2024, 22:41
Behavioral task
behavioral1
Sample
6c2dd421fd46d506737917d7f93b9d20N.exe
Resource
win7-20240704-en
General
-
Target
6c2dd421fd46d506737917d7f93b9d20N.exe
-
Size
236KB
-
MD5
6c2dd421fd46d506737917d7f93b9d20
-
SHA1
e1c1b201a99b193f5eabb58f440e3de9a433c635
-
SHA256
806eb0fafc172c43e13c840ef21266549f52d95d315821eae8a2a1f90e5a464d
-
SHA512
ce968fca6edcdbc58d695d2d088b91257410e4e45d155d73c0290bc184d12a2ac082a657d6bc2433b64c17bdba3317a180d473c7c6c6dbe0a4c27703965bb3bc
-
SSDEEP
3072:RJ0Bs3o8A4M3riN6MhGkgS3PL6pb9t16n5OkhBOPC/Q/FnncroP9:bwDeM7iNEkgiOb31k1ECuJ/F
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/2240-0-0x0000000000400000-0x000000000043B000-memory.dmp upx behavioral1/memory/2240-1-0x0000000000400000-0x000000000043B000-memory.dmp upx behavioral1/files/0x000e000000014132-7.dat upx -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 6c2dd421fd46d506737917d7f93b9d20N.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
236KB
MD5391368a195ca2deb684cfb91448c7954
SHA157d67e582d1b125704a656dfb8b357f316b54b21
SHA256c4103f79af9a223eb528be80deec3fc50f526688b822d5a546f37c2a6675f5e4
SHA512244c1aabc624d1b4f94b31d2403ea9e3eb440f12938094e5e3df429cd9e3f2276a57529874aa7f1adeb475013deb658703d84d4747c553e9671da42668448a7f