Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
122s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
06/09/2024, 20:51
Static task
static1
Behavioral task
behavioral1
Sample
bc35c3f75decaf2ecbdad7c5551f787dd3351c27fa022baa4838d6bd938e00d7.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
bc35c3f75decaf2ecbdad7c5551f787dd3351c27fa022baa4838d6bd938e00d7.exe
Resource
win10v2004-20240802-en
General
-
Target
bc35c3f75decaf2ecbdad7c5551f787dd3351c27fa022baa4838d6bd938e00d7.exe
-
Size
2.3MB
-
MD5
1b295df9820e71ceb3c7295480aba4fb
-
SHA1
90284a8ffcde45d451321a768dae25a5c134d2f7
-
SHA256
bc35c3f75decaf2ecbdad7c5551f787dd3351c27fa022baa4838d6bd938e00d7
-
SHA512
f8b6323d4f5b5b50294a461d0614475221bd93e09c617e130d8ecac69816af57b3a3731f442f0e11123aff9fe3fdb5aab47f625ff2c6912136ab056029b65c59
-
SSDEEP
49152:223g4euwRuKUnQnpffvgqLFMs8URzs7Vjmtne7czS7DcmCnd2wq94aqVXQ0XUeHg:2L4euwRuKUnQnhfvgqLFN8URzs7VjmtG
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language bc35c3f75decaf2ecbdad7c5551f787dd3351c27fa022baa4838d6bd938e00d7.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 276 bc35c3f75decaf2ecbdad7c5551f787dd3351c27fa022baa4838d6bd938e00d7.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\bc35c3f75decaf2ecbdad7c5551f787dd3351c27fa022baa4838d6bd938e00d7.exe"C:\Users\Admin\AppData\Local\Temp\bc35c3f75decaf2ecbdad7c5551f787dd3351c27fa022baa4838d6bd938e00d7.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:276