Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
16s -
max time network
16s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
02/09/2024, 15:21
Behavioral task
behavioral1
Sample
5e4ba724b624c638743c9c92333046c0N.exe
Resource
win7-20240705-en
2 signatures
120 seconds
General
-
Target
5e4ba724b624c638743c9c92333046c0N.exe
-
Size
69KB
-
MD5
5e4ba724b624c638743c9c92333046c0
-
SHA1
1c74dde1740ba935f11893d19c24711be95d7345
-
SHA256
cb532302ff26d187787924e9bfeb336d85b2fef782c94cefab417f467d0ca041
-
SHA512
fc890dff7bb08f1a68640963d2b62e24984a217aff336ec520fbab64f61bbbc1c314040ad31f93c09838f232c85eb7f9570bf627941d3e5ffaa4af6a2d633841
-
SSDEEP
768:kBT37CPKKdJJ1EXBwzEXBwdcMcI9E+I+SGmKK9bYroWAYmLLwMpkIK:CTW7JJ7TC+I+1aERm3w0K
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/2708-0-0x0000000000400000-0x000000000040A000-memory.dmp upx behavioral1/memory/2708-1-0x0000000000400000-0x000000000040A000-memory.dmp upx -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 5e4ba724b624c638743c9c92333046c0N.exe