Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
17/08/2024, 00:17
Static task
static1
Behavioral task
behavioral1
Sample
2e7bc8d938185c5741e5dfa30df38855dd42a5a2d219794f76c8bed60edcfee6.exe
Resource
win7-20240704-en
General
-
Target
2e7bc8d938185c5741e5dfa30df38855dd42a5a2d219794f76c8bed60edcfee6.exe
-
Size
2.0MB
-
MD5
3feddafbac4194eb4e4cbab60be9cd83
-
SHA1
d815e6d4844518c8b77e25a750217bdda7cc0b56
-
SHA256
2e7bc8d938185c5741e5dfa30df38855dd42a5a2d219794f76c8bed60edcfee6
-
SHA512
c513012b927055179f8bce6de622857f6d1e4b5955ce09f29aec7533f4914d2be5d69eb586b8d11c3f9cd7c8ac0df836b7ba459c1665a540ad67fb7e7b27dcb6
-
SSDEEP
49152:MVAbwuGwKOco09gsJcxlV8fTguPOAItUIrhO5Ov:AApQx5+Mc27g9tfoMv
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
pid Process 2364 setup.exe -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2e7bc8d938185c5741e5dfa30df38855dd42a5a2d219794f76c8bed60edcfee6.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2e7bc8d938185c5741e5dfa30df38855dd42a5a2d219794f76c8bed60edcfee6.exe"C:\Users\Admin\AppData\Local\Temp\2e7bc8d938185c5741e5dfa30df38855dd42a5a2d219794f76c8bed60edcfee6.exe"1⤵
- System Location Discovery: System Language Discovery
PID:2688 -
C:\Users\Admin\AppData\Local\Temp\7zS08AA36E6\setup.exeC:\Users\Admin\AppData\Local\Temp\7zS08AA36E6\setup.exe2⤵
- Executes dropped EXE
PID:2364
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
5.2MB
MD544908c157516d82119d84a3b1c4a31f7
SHA1dea19891d14b4e3598844f624c919b0dc5ce236f
SHA256be21539218a31ff278f218a172b9972f4d8978a281387acdadf9a25b86e30b1a
SHA5125a83d45533202ba573941d041619bd7f17e997f352f73528029d1f07da9a26c4f50f1cf77c822f972b596fa75bd2eeb0bca8170d89343d8b590ba869be058106