Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    16s
  • max time network
    16s
  • platform
    windows7_x64
  • resource
    win7-20240729-en
  • resource tags

    arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
  • submitted
    19/08/2024, 08:43

General

  • Target

    UpdateApp.exe

  • Size

    326KB

  • MD5

    656db181de0a89379af136de3d651229

  • SHA1

    83e57f44281f437e383445edcd5617a6bc17e2c8

  • SHA256

    68b9cf08eebf53aeb82a4fba84805d0f7d1771b72f87bade2c4880d5cfb8fb0c

  • SHA512

    c6d23a0c04cd4e03be5e3f120d9eefb0f4a664ba7994789007320e30c3e49cd6e4f59c656596a3e7c6d5abcd5494b04fdf1d079ed7245d42f23514f7b993a3d1

  • SSDEEP

    3072:w5ZytBlrzu2WI0OHzHtBlrzu2WI0OHz6TytBlrzu2WI0OHz:w5knzu2WITnzu2WI3nzu2WI

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\UpdateApp.exe
    "C:\Users\Admin\AppData\Local\Temp\UpdateApp.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:2416

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2416-0-0x0000000074561000-0x0000000074562000-memory.dmp

    Filesize

    4KB

  • memory/2416-1-0x0000000074560000-0x0000000074B0B000-memory.dmp

    Filesize

    5.7MB

  • memory/2416-2-0x0000000074560000-0x0000000074B0B000-memory.dmp

    Filesize

    5.7MB

  • memory/2416-3-0x0000000074560000-0x0000000074B0B000-memory.dmp

    Filesize

    5.7MB