Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    15s
  • max time network
    16s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    25/08/2024, 11:52

General

  • Target

    shit.exe

  • Size

    13.5MB

  • MD5

    06ab6d86e81b7f912ba7d4b8f44999a9

  • SHA1

    52b9f8e1ad0d11bd562546f681f514c812b1fb93

  • SHA256

    b6521f5722ba257bcdcb8fc9e4bfc602125f847c0b8427529f1ad15c04adadd2

  • SHA512

    92c9e5911c2c5a82db5149776b6bdd484ef27a70d2d6cbc477cba5a2e637d44f5b9ef443fb85605a9198bc63bc5a299291f2b82b99836dc06222e8a548f642f1

  • SSDEEP

    196608:vO2EgViaPGniCtJKHyTxD5QSEVnKX+HGmwt+/Jk7j2Dy9zBYRKU:1cOGniJV0p57j2DKYRr

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\shit.exe
    "C:\Users\Admin\AppData\Local\Temp\shit.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:2864

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2864-0-0x00000000060F0000-0x0000000006320000-memory.dmp

    Filesize

    2.2MB

  • memory/2864-4-0x0000000006630000-0x0000000006940000-memory.dmp

    Filesize

    3.1MB

  • memory/2864-10-0x00000000005B0000-0x00000000005C0000-memory.dmp

    Filesize

    64KB

  • memory/2864-14-0x0000000000BA0000-0x0000000000BB0000-memory.dmp

    Filesize

    64KB

  • memory/2864-9-0x0000000006630000-0x0000000006940000-memory.dmp

    Filesize

    3.1MB