Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    150s
  • max time network
    19s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    05/09/2024, 01:01

General

  • Target

    008a9fa752bbd5a3928d15a4e010e006e91a7d27f5057def445d279da4e82822.exe

  • Size

    896KB

  • MD5

    664cf41a62c7fbb7fc18a61807d85f71

  • SHA1

    ab551aa18c83a8077497930b8b37e94db2d8311f

  • SHA256

    008a9fa752bbd5a3928d15a4e010e006e91a7d27f5057def445d279da4e82822

  • SHA512

    876fe6278b52ef33f7942789be44239f745201e2cd58ca49f7d0e6b28f21e8ef2fa0eabd0846a207d2ef0323d0273dfcb3db1ee84b8b33b8c22836269c2bd8b1

  • SSDEEP

    12288:SqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDgacTK:SqDEvCTbMWu7rQYlBQcBiT6rprG8asK

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\008a9fa752bbd5a3928d15a4e010e006e91a7d27f5057def445d279da4e82822.exe
    "C:\Users\Admin\AppData\Local\Temp\008a9fa752bbd5a3928d15a4e010e006e91a7d27f5057def445d279da4e82822.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    PID:1972

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads